{"report_id":"3afd423f-2c45-49e6-b3de-ce428c0d61b9","version":6,"status":"done","tags":[],"date":"2026-01-24T13:45:44Z","url":{"schema":"https","addr":"67to67billions.com","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"ip":{"addr":"172.67.200.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"67to67billions.com/","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"title":"67 to 67 Billion","dom":{"size":1317,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (333)","md5":"0c0588729f3f9c66093de7ac85464069","sha1":"f60a24dd63ce028723b8a567c2695042922c61da","sha256":"518c22fbc86e73f51245485fcb47a9b53d0917b3ed7f7ce97ca2cb8fca6b1e5e","sha512":"139d5a9441f4248ffa26f43beeb8f494aff531e20339224c9730f634b75344688d432cd6032449b8aa59cb47b58061e154a791253a40b4f2fd8d0653768b05de","ssdeep":"","tlshash":"ef219e7350a0d40e5d124a5eb5c0b66c99c3b5176e308ce2f48e964d8d44fe28a6a65e","dom_hash":"domhash486310dbbdf2e3da23e3cc82458fe867","first_seen":"2026-01-24T13:45:50.232869Z","last_seen":"2026-01-28T09:53:21.647913Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"67to67billions.com","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"ip":{"addr":"172.67.200.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:45:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"67to67billions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"corsproxy.io","ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-01-18T22:04:39.131713Z","alert_count":0,"request_count":2,"received_data":3132,"sent_data":1085,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-01-19T17:11:33.285215Z","alert_count":3,"request_count":3,"received_data":659270,"sent_data":1630,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"67to67billions.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-19","domain_rank":0,"first_seen":"2026-01-24T13:45:45.867296Z","last_seen":"2026-01-24T13:45:45.867296Z","alert_count":12,"request_count":4,"received_data":1720315,"sent_data":1909,"comment":"","tags":null,"fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"framer.com","ip":{"addr":"54.240.174.78","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-12-30","domain_rank":6950,"first_seen":"2019-03-11T22:31:22Z","last_seen":"2026-01-21T12:44:50.695815Z","alert_count":0,"request_count":1,"received_data":1118,"sent_data":678,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"67to67billions.com/","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ab6b54711a5d1086250fb97ea5ad6e04","sha1":"764e01546e3728e550a8f1a3dc856039a28e10bf","sha256":"b965e39b6a431d685daa1cf10be0c66245006eea03d54dfa31cc1a3b943763e2","sha512":"6302e0d3dcdf689c9241e38086416bb5fd297a9873410c51d23ad1da82da81472c6d6f6370954cce0780f9d4ccb5101e62865821e41a5616e5211dd666cb0afb","ssdeep":"6144:sF2QE7Q/MVfgRKB3d7GPdsQyc+70QHwnFltBh1S7XRsNSs3JQwflYteSUb4OAMt4:sMQ4QkVfHld7GPdsQyc+70QHwnFltBh4","tlshash":"fc8465ea3fab2568c210e343d53d6effe974494c0f14d897b67c6240a5e86a361c329d","size":387856,"data":"","first_seen":"2026-01-24T13:45:50.239993Z","last_seen":"2026-01-28T09:53:21.660563Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"67to67billions.com/meow.theme.umd.js","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19147749a615c57b05dfc1cfd8dc4119","sha1":"79e32e14ffa8f077ad79929b2334e5d7c15435b0","sha256":"61e5d393950e6e9e383bf8b469c6c30a0e7e71f05e3efe91fc62240efcbbfba9","sha512":"24a5fdb699a8c5065cbf706f1a28516f6996341a3f60c4d88365f6e28c4f9dac7813a6e58514984f735d006e178b3a0e366ae76ebbeae97f1f32204c418a5c5d","ssdeep":"12288:abBnTQa4VZnVPCPdsQyc+70QHwRFltDhfS7XRsNSs3JQwfl8veSUp4OAMDiK2uI6:aUVZVqPdsQyc+70QHwRFltDhfS7XRsNb","tlshash":"e68485ea3faa2568c210e343d53d6dffe874494c0f54d887f67c628591e8aa361c329d","size":395268,"data":"","first_seen":"2026-01-24T13:45:50.234802Z","last_seen":"2026-01-28T09:53:21.656026Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/passport-github2.cjs.min.js?t=29487705\u0026u=2TZiWOjC0ygyNDTnGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZNuIoZcc0DmMIMesRw","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"67to67billions.com/","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:45:21.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"67to67billions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 18:39:19 GMT","end":"Thu, 19 Mar 2026 19:38:03 GMT"},"fingerprint":{"sha1":"E9:78:5B:EB:3E:18:F4:0B:7D:63:C2:F1:D3:A7:91:19:0A:A2:9E:63","sha256":"A8:CE:54:AC:9F:53:5C:FF:2F:BE:E1:35:8C:EE:FC:62:67:A2:9C:78:23:08:20:7F:14:7B:26:C4:3B:7B:65:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 67to67billions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:45:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nexpires: 0\r\nlast-modified: Fri, 19 Dec 2025 19:39:48 GMT\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SraF%2B%2BSInX1mmz%2FudQ9IMTZqGrp598JOGfL%2BaRyhzw56qqwXYiahwBNbROBlztMq0t9aL1LNGRSnj0g6AxnppVa9ow6shCBdp9AEsYu8K%2BP1gQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ff887ec402efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1305856,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22519)","md5":"5b63d4ec2022928d2dccf0a2ddb5d1bf","sha1":"89abe6c0fd815dcd762b641ea87bc9b3c6730632","sha256":"c9421014845810130cbc85c1b90dd40e7ced0a36f2b59a6a64a4e53f114371d1","sha512":"4173666d9a63b8692f2cabccecc7b037a2b80c7d9655490ef8c9b9f6d7d5d88f4ac3ca81eb07cbb9f7c6c0a14f91f05ed94d91019a33437e62e8c941a1c61e6d","ssdeep":"24576:Z7nue9VawjeFYW6Y5JycSkktbuVAGjU9UoHF:F19MF8cSnHF","tlshash":"e925dfa3611af4746cd7297efb1de4289d242541fe32c3db92ae424f81ddaf8225235c","first_seen":"2026-01-24T13:45:50.233997Z","last_seen":"2026-01-28T09:53:21.654851Z","times_seen":3,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":78,"dns":45,"connect":10,"send":0,"wait":227,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"67to67billions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"67to67billions.com/meow.theme.umd.js","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://67to67billions.com/","date":"2026-01-24T13:45:22.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"67to67billions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 18:39:19 GMT","end":"Thu, 19 Mar 2026 19:38:03 GMT"},"fingerprint":{"sha1":"E9:78:5B:EB:3E:18:F4:0B:7D:63:C2:F1:D3:A7:91:19:0A:A2:9E:63","sha256":"A8:CE:54:AC:9F:53:5C:FF:2F:BE:E1:35:8C:EE:FC:62:67:A2:9C:78:23:08:20:7F:14:7B:26:C4:3B:7B:65:96"}}},"request":{"raw":"GET /meow.theme.umd.js HTTP/1.1\r\nHost: 67to67billions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://67to67billions.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:45:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nexpires: 0\r\nlast-modified: Fri, 19 Dec 2025 19:39:48 GMT\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNZyf19wBuvTQ2l0VJneOCMcqwhHMzubI6BNKYDaRoIouywm98oC5kMRbbVOjURybKlybEJpBWpGQm6QyzDD2c%2Fjhcwhy9C4ks7CjavUOQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c2ff88bab005696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":395268,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"19147749a615c57b05dfc1cfd8dc4119","sha1":"79e32e14ffa8f077ad79929b2334e5d7c15435b0","sha256":"61e5d393950e6e9e383bf8b469c6c30a0e7e71f05e3efe91fc62240efcbbfba9","sha512":"24a5fdb699a8c5065cbf706f1a28516f6996341a3f60c4d88365f6e28c4f9dac7813a6e58514984f735d006e178b3a0e366ae76ebbeae97f1f32204c418a5c5d","ssdeep":"12288:abBnTQa4VZnVPCPdsQyc+70QHwRFltDhfS7XRsNSs3JQwfl8veSUp4OAMDiK2uI6:aUVZVqPdsQyc+70QHwRFltDhfS7XRsNb","tlshash":"e68485ea3faa2568c210e343d53d6dffe874494c0f54d887f67c628591e8aa361c329d","first_seen":"2026-01-24T13:45:50.234802Z","last_seen":"2026-01-28T09:53:21.656026Z","times_seen":5,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"67to67billions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"framer.com/edit?framerSiteId=36cdeafb9c58e617a617d16b2bd64507cfc6e23782bbe63bd063d94d7a865aef\u0026source=www.67to67billion.com\u0026features=%7B%22editorBarDisableFrameAncestorsSecurity%22%3Afalse%2C%22onPageLocalizationSupport%22%3Afalse%2C%22onPageMoveTool%22%3Afalse%7D\u0026loadStart=1766172562695","fqdn":"framer.com","domain":"framer.com","tld":"com"},"ip":{"addr":"54.240.174.78","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{11703f7e-f33b-40be-bee4-3963f7df31d7}?https://67to67billions.com","date":"2026-01-24T13:45:23.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Jun 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:72:10:D1:4B:25:0B:A7:E6:DC:96:3B:05:C3:C5:80:49:3F:2B:CB","sha256":"07:21:0D:3E:15:F1:0B:01:C4:EF:77:B5:4D:51:2C:75:2A:9C:29:28:3D:68:AC:26:CF:D4:71:17:F3:28:FD:6F"}}},"request":{"raw":"GET /edit?framerSiteId=36cdeafb9c58e617a617d16b2bd64507cfc6e23782bbe63bd063d94d7a865aef\u0026source=www.67to67billion.com\u0026features=%7B%22editorBarDisableFrameAncestorsSecurity%22%3Afalse%2C%22onPageLocalizationSupport%22%3Afalse%2C%22onPageMoveTool%22%3Afalse%7D\u0026loadStart=1766172562695 HTTP/1.1\r\nHost: framer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://67to67billions.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 895\r\ndate: Sat, 24 Jan 2026 13:41:45 GMT\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=300\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://sentry.io/api/2963040/security/?sentry_key=05dcfd8152434a7385d322f28af36f66; frame-ancestors www.67to67billion.com\r\ncross-origin-resource-policy: same-origin\r\nlink: \u003chttps://api.framer.com\u003e; rel=preconnect\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"default\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://framer.report-uri.com/a/t/g\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nvia: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 218\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: iP9_-0C0wkG5b1Rlzwh95zpQ2c2i2F3CqPZoI-OCC8lhoYsqHIQUtA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":31,"dns":23,"connect":1,"send":0,"wait":257,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"67to67billions.com/_EtmJEu0.php?s=%2F%40v1%2Fcdn%2Fjs%2Fpassport-github2.cjs.min.js%3Ft%3D29487705%26u%3D2TZiWOjC0ygyNDTnGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZNuIoZcc0DmMIMesRw","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://67to67billions.com/","date":"2026-01-24T13:45:23.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"67to67billions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 18:39:19 GMT","end":"Thu, 19 Mar 2026 19:38:03 GMT"},"fingerprint":{"sha1":"E9:78:5B:EB:3E:18:F4:0B:7D:63:C2:F1:D3:A7:91:19:0A:A2:9E:63","sha256":"A8:CE:54:AC:9F:53:5C:FF:2F:BE:E1:35:8C:EE:FC:62:67:A2:9C:78:23:08:20:7F:14:7B:26:C4:3B:7B:65:96"}}},"request":{"raw":"GET /_EtmJEu0.php?s=%2F%40v1%2Fcdn%2Fjs%2Fpassport-github2.cjs.min.js%3Ft%3D29487705%26u%3D2TZiWOjC0ygyNDTnGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZNuIoZcc0DmMIMesRw HTTP/1.1\r\nHost: 67to67billions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://67to67billions.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:45:23 GMT\r\ncontent-type: application/x-php\r\ncontent-length: 16334\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nexpires: 0\r\nlast-modified: Fri, 19 Dec 2025 19:39:48 GMT\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZfqDDNNo7XBGVkV4DzOo6lDJDtEY0easpOdSrECxWufqYILfm3P3smbpUY%2FCZrzAsKQvyU3y6C1eaViUAfoT24tMpkvQzFv7k4LEDuR1lE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff8938a345696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16334,"size_decoded":0,"mime_type":"application/x-php","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"67to67billions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://67to67billions.com/","date":"2026-01-24T13:45:24.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 18:55:39 GMT","end":"Thu, 23 Apr 2026 19:55:36 GMT"},"fingerprint":{"sha1":"C7:A3:F8:71:A0:C4:0A:D3:96:8A:FF:20:70:85:EA:5E:FE:E1:C7:4C","sha256":"A1:1E:61:D2:B9:99:EB:58:F6:4A:D1:83:39:B7:4B:64:61:60:B0:7F:BC:C6:DE:FB:D0:D8:30:6F:F6:9B:A6:1A"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://67to67billions.com/\r\nOrigin: https://67to67billions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:45:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7bMRhLiALampQMbKzZFfpXNSUtDOVA6fJphHuqF3kR%2BxaQncazwOHuTP354lNsu%2B%2BHY%2Fyrqgmw%2FNngSbIuMA4O6juzOLVUTMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9c2ff89988520b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":69,"dns":16,"connect":1,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://67to67billions.com/","date":"2026-01-24T13:45:24.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 18:55:39 GMT","end":"Thu, 23 Apr 2026 19:55:36 GMT"},"fingerprint":{"sha1":"C7:A3:F8:71:A0:C4:0A:D3:96:8A:FF:20:70:85:EA:5E:FE:E1:C7:4C","sha256":"A1:1E:61:D2:B9:99:EB:58:F6:4A:D1:83:39:B7:4B:64:61:60:B0:7F:BC:C6:DE:FB:D0:D8:30:6F:F6:9B:A6:1A"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://67to67billions.com/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://67to67billions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:45:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, POST, GET\r\ncache-control: public, max-age=3600, s-maxage=3600\r\nlast-modified: Sat, 24 Jan 2026 13:38:30 GMT\r\nserver: cloudflare\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-cache-body-hash: cd0fcd93326a493dbfbef017045ba271\r\nx-cache-read: hit\r\nx-cache-saved: 2026-01-24T13:38:30.972Z\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 13ms\r\nx-proxy-version: 2.4.2\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -2425\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-request-id: 9946cbfa-457d-4356-993c-a1c2dca46321\r\nx-rpc-node: ams346\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dC8RQ5O%2BrU5dXJfhYfOLadsz9wjokCE4GMuCDAORuyolTuyqjJriFGCcs6s0dwdgbOtsslRu1ac4Hnbr905iwUdoeQz6QeFEtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncf-ray: 9c2ff899a8600b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73b3f098ea8dc1a4b48f2164e498e506","sha1":"7ae65397b2629aa4d3fadf44d7d3049c2c75b22b","sha256":"3c8b28ca1c43747db3f9811649e3227b061b98c87a26e86e39ba88b4abab5a03","sha512":"85526a4235686378ed10a74e5311f0724121f51a29d6f3cb09b6605b513f61cdaa8c69752e7ecd8c7bd4104e4ae01b15965a317d360d0b223eaafc2ffdbc1455","ssdeep":"","tlshash":"01e07d803d090bbedee44e17cb1521d9d3c109585b004a8713db0d1571c965eb44b6bb","first_seen":"2026-01-24T13:38:53.763468Z","last_seen":"2026-01-24T14:20:54.583756Z","times_seen":18,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/passport-github2.cjs.min.js?t=29487705\u0026u=2TZiWOjC0ygyNDTnGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZNuIoZcc0DmMIMesRw","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://67to67billions.com/","date":"2026-01-24T13:45:24.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"GET /@v1/cdn/js/passport-github2.cjs.min.js?t=29487705\u0026u=2TZiWOjC0ygyNDTnGDY5MjU2NDUwMjhjZmYzYzM0MDI3ZTNmZNuIoZcc0DmMIMesRw HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://67to67billions.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:45:25 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=passport-github2.cjs.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:45:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b0bec917ca9ddb78821a3a30e64a768f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":59,"dns":33,"connect":1,"send":0,"wait":229,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://67to67billions.com/","date":"2026-01-24T13:45:25.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://67to67billions.com/\r\ncontent-type: application/json\r\nContent-Length: 2201\r\nOrigin: https://67to67billions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2201,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:45:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"d6-O1vYkW6uV0COETjlHph/ChLaZEM\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9967\r\nx-ratelimit-reset: 1769262385766\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:45:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 07b4493ad5afc1ee22f59d92d50aafdc\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ae2d132f7a584bdb534217dcfa609e0","sha1":"3b5bd8916eae57408e1138e51e987f0a12da6443","sha256":"a42f68671494a4d4b0082f973461c43df2ca7170c84909f7640d305c9971cae9","sha512":"acd7bb1a609304f312b43381ee1cbe3d7d88388d0731078ec8a9de7bd905327098fb4205045b1234df4cbf97ae9e21e7bc273973566875feaae1e43ddc041879","ssdeep":"","tlshash":"9bd0239d0e44a048d4425a8e021cfecb033092f0b623940d20cc01c3824ea31350d30c","first_seen":"2026-01-24T13:45:50.237892Z","last_seen":"2026-01-24T13:45:50.237892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"67to67billions.com/secureproxy?e=ping_proxy","fqdn":"67to67billions.com","domain":"67to67billions.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://67to67billions.com/","date":"2026-01-24T13:45:23.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"67to67billions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 18:39:19 GMT","end":"Thu, 19 Mar 2026 19:38:03 GMT"},"fingerprint":{"sha1":"E9:78:5B:EB:3E:18:F4:0B:7D:63:C2:F1:D3:A7:91:19:0A:A2:9E:63","sha256":"A8:CE:54:AC:9F:53:5C:FF:2F:BE:E1:35:8C:EE:FC:62:67:A2:9C:78:23:08:20:7F:14:7B:26:C4:3B:7B:65:96"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: 67to67billions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://67to67billions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 24 Jan 2026 13:45:23 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nexpires: 0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFuRqfH2YNb9olVD8XHpl2tBSv4NvYZOGLFYatyEU0MniBwmwszsp4IQXguI14iJrT3sjQExZzAL4y7rQH9aagwap%2Bx7UfoOnL93wkkLeyA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c2ff891183b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ef81e41d11c9e7193ddd3d470dbb3eda","sha1":"0c15d12755a0be84e6403445c427231c274919c6","sha256":"7515bf959b73b956ceb967351c7e299cbb3668a53d35f9c770eb72e00d93ced6","sha512":"bf69c60fbb6d5ff50d81cd093cbabe59cd4eed439822e9ed02472245c3dae033cec143f1c4bbe6f702b7530f87c020442217ca1859da8f4b0f578a93b46cbdfa","ssdeep":"","tlshash":"6450000c0303c3cc0000003030c0000000000303300000300000c0000000c0000c000c","first_seen":"2023-04-05T06:57:17Z","last_seen":"2026-08-11T18:53:04.662794Z","times_seen":6453,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"67to67billions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"67to67billions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://67to67billions.com/","date":"2026-01-24T13:45:25.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://67to67billions.com/\r\nOrigin: https://67to67billions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:45:25 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/24/2026 13:45:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e64ec778ce3700ab3b06720aab9502bb\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":14,"dns":1,"connect":3,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}