{"report_id":"3b02a234-b4d0-4d32-9631-3c6760e9d879","version":6,"status":"done","tags":[],"date":"2026-06-01T14:48:30Z","url":{"schema":"http","addr":"sray-tkn.live","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"104.21.68.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sray-tkn.live/","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"title":"SolRay — Multi-Chain Portfolio Tracker","dom":{"size":46038,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15956)","md5":"0568460dfaf8eba6d0677dc81129637a","sha1":"cca2fac6ff8280c7486e861cbba6caac70afb073","sha256":"913a7e3e2dc0c0c877203631293f6a327bacf998717427273f00a6f9ad779fb1","sha512":"0e224d314b2bfc51ad5160047f648599c99c36bf2a95716018af6dccfbd9ba65bfb07ce3f8d9fb7f274c8a3183f7e6de3fc791ca9122d8288634502abd5b008d","ssdeep":"768:nyzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwc8:nyzqyrY4yN4Mpp8KM7wJfsbIUYo9H","tlshash":"52234c31f405193bbb0791ee62e5af7d32a2b106d903250976f882d5d7caef39c76128","dom_hash":"domhash6b61734d5bdaafe196350fdde23e0a78","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sray-tkn.live","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"104.21.68.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T14:48:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"delegate-plenty.data-repo.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-02","domain_rank":0,"first_seen":"2026-05-24T11:27:54.274226Z","last_seen":"2026-05-24T11:27:54.274226Z","alert_count":0,"request_count":4,"received_data":969433,"sent_data":1897,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sray-tkn.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-01T14:48:31.139295Z","last_seen":"2026-06-01T14:48:31.139295Z","alert_count":42,"request_count":14,"received_data":421047,"sent_data":6250,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"track077.top","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-22","domain_rank":0,"first_seen":"2026-05-24T11:27:54.278376Z","last_seen":"2026-05-24T11:27:54.278376Z","alert_count":0,"request_count":2,"received_data":3496,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2212,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sray-tkn.live/script.js","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd1e7e44e9418e914da08efc982df6a6","sha1":"8bf5bf66971b4d272b81813d7b991a0b018c5bd5","sha256":"b18ab394854a070911d2d9fdb7194dccc9d0a3d9fbfaa48034c06880fc84ae94","sha512":"d20a3a1cd8689a5e6cc7d7a295b1fb67ca66a86e7756a630634794be855ffd383bdbd9b5d793f2fe9d53f2c4534266e3e8fc3359b66abc73c0f9335eb31ee1a4","ssdeep":"192:Fnw5JWGNoqal8nfwStPaXRlYxpdknXJ0mIH2QiYiVLKSiOSKLAPImccDmP3zTZjH:hIl8unNb36bW37E0IYP1cAfdk","tlshash":"4592642971f700710aa7707b835b668d3633005b3a4ace553d5e8b542fd0b64aaf2bda","size":19689,"data":"","first_seen":"2026-01-19T15:44:21.048927Z","last_seen":"2026-06-01T17:47:52.664091Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track077.top/t.js","fqdn":"track077.top","domain":"track077.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"280fcd8878355fe57c9a78e476d8d412","sha1":"76d50b9f65d7f8eea3a36f450b72b1988617702d","sha256":"1aab30b5832a00e285fc63cec4187b48e8b85a1bb616f07d3641c0214ef394fe","sha512":"736a203b349720def51bacf95f6ac291bafdf18695c2b97f58bc4263bf1992f2ef46d3afefe358c6de5526003911750122714cc9457c2cb2849e768785537043","ssdeep":"","tlshash":"1e41735a0ce2e0311863343e136fe1183227a0077da9f962399cc264df98bb86974dd8","size":2117,"data":"","first_seen":"2026-05-25T11:13:29.587504Z","last_seen":"2026-06-01T17:47:52.665473Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sray-tkn.live/Logo_vankedisi.jpg","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /Logo_vankedisi.jpg HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41797\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:12 GMT\r\npriority: u=4,i=?0\r\netag: \"699fe1e4-a345\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1aH8poyz7PmFrBGfBZLh471vfGC8v4EF2hPxaydRm84LFnOjUhmQq2aaRUQHH2vYVqXtQTHQj7KWMIUcnJ8rkzxaEMn48I%2BCYRO5DCQC0yrzrLl2%2FcotAi%2BMVCkflX2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f04809bb70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41797,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"93670e19bd42459df32cf304d29a1df9","sha1":"e6f94140e1ef76c9b2f0666ecc547fb6ca6ba07d","sha256":"e1d833f5b831f2055f2c17016c9c4f87f3c22908ca18c357f9a849ff0a8df37b","sha512":"218cc9003add1d55abacde316496f474b6cbdb2d393d1cbdade19b956ed833f7276861efff5d5a3699c8d7e47feac22ffc25a462e6fb297215965ad55ff63422","ssdeep":"768:IlnZMfu8sKyCLUuYbqDia01GZ/VQwXGwe6S2V0CKkxsOANWfdF:O4aasODiad+lwV5KNpNAF","tlshash":"6813f12ddb4dbba4c349c5b142b96779130aee5946aa68281e7f0aefd055db3c8000cf","first_seen":"2026-01-19T15:44:21.066734Z","last_seen":"2026-06-01T17:47:52.668988Z","times_seen":58,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/Logo_QmaFy59TMnLb4jGgL6LpquyXSxTRXKR4mEfSobUSsPoR46.jpg","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /Logo_QmaFy59TMnLb4jGgL6LpquyXSxTRXKR4mEfSobUSsPoR46.jpg HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20182\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:12 GMT\r\npriority: u=4,i=?0\r\netag: \"699fe1e4-4ed6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWW5XNXrLbfOh481o%2B9CscOH4Q1MFlu4tlE7DqnUrudi6hU%2FUPhvNWB0DlpLEDMY9Rez51FRUsL6PEwPu5jFQs%2FgzQNbKJ1FbP9bEbHMkZVZO3tqBx%2BJEvrgpYwAs1GH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f04809bbb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20182,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"4d268a8e09836f47f9f5e09ca911ee29","sha1":"c254ef247bda885a4fe77e12be7d1fcea04f586c","sha256":"323efa4ae855bdd9447674f27abf03484746191d824cd5941de983f8b6884507","sha512":"938857c64397b55531a4961b57d63f1b52fafaaa78a206ed8ba5560003aeb8ddcbe87746c77dfd41e475cb38b57a9a49cc4106f1e3912e98b6457bf713b9d9f2","ssdeep":"384:9m+yx6Y2ep1PhpziESAgn26q38wI4vy/wcvvXKpfChTqGmKyWsnWioAm:YSjChpuESAg26qMwGBafI0nWb","tlshash":"4a92e09ba3ed9d7add624ff290ba022bb3f2548fee14c1c75c21105143ee8c7d4a9186","first_seen":"2026-01-19T15:44:21.070493Z","last_seen":"2026-06-01T17:47:52.663561Z","times_seen":58,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track077.top/t.js","fqdn":"track077.top","domain":"track077.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track077.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 19:01:24 GMT","end":"Thu, 20 Aug 2026 19:01:23 GMT"},"fingerprint":{"sha1":"6F:B3:5C:4E:9E:66:48:28:0E:36:D6:AC:6C:D5:DD:1A:F6:0B:E7:BC","sha256":"66:B9:D5:6B:C7:49:AD:81:CF:3F:49:E6:85:CC:9F:EA:E9:0D:D1:5D:BA:F5:7B:A6:75:CA:7C:73:86:F4:4D:19"}}},"request":{"raw":"GET /t.js HTTP/1.1\r\nHost: track077.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 22 May 2026 20:40:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdYgs2YVZw58VDcYkFTbuIK4REAC7Mwr2CUh9ZISFHrXKu2R4%2Bcd7bpC4Mz1IYZrsu8eqBMmu2%2FqQB5X%2FsgtNGdC%2BIzvuinGb2BYgRTB25FTfBX1XHmA2mbAoTTJ7mc%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a10bf2d-845\"\r\ncontent-encoding: br\r\ncf-ray: a04f04812ba75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2117,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"280fcd8878355fe57c9a78e476d8d412","sha1":"76d50b9f65d7f8eea3a36f450b72b1988617702d","sha256":"1aab30b5832a00e285fc63cec4187b48e8b85a1bb616f07d3641c0214ef394fe","sha512":"736a203b349720def51bacf95f6ac291bafdf18695c2b97f58bc4263bf1992f2ef46d3afefe358c6de5526003911750122714cc9457c2cb2849e768785537043","ssdeep":"","tlshash":"1e41735a0ce2e0311863343e136fe1183227a0077da9f962399cc264df98bb86974dd8","first_seen":"2026-05-25T11:13:29.587504Z","last_seen":"2026-06-01T17:47:52.665473Z","times_seen":12,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":69,"dns":63,"connect":1,"send":0,"wait":105,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 01 Jun 2026 14:48:10 GMT\r\ndate: Mon, 01 Jun 2026 14:48:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-06T22:32:37.925225Z","times_seen":29408,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":205,"dns":1,"connect":29,"send":0,"wait":46,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 392504\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T23:09:52.427356Z","times_seen":205316,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":92,"dns":4,"connect":15,"send":0,"wait":15,"receive":20,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delegate-plenty.data-repo.cc/api/visit?origin=sray-tkn.live","fqdn":"delegate-plenty.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"data-repo.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 20:17:20 GMT","end":"Fri, 31 Jul 2026 20:17:19 GMT"},"fingerprint":{"sha1":"88:F5:64:28:FC:16:B5:83:E0:DC:54:B5:6B:83:6D:F5:CE:FE:4A:DE","sha256":"8C:95:11:4C:0A:4C:BA:BA:B0:F8:52:AB:F2:EE:85:96:E4:8E:65:2C:7F:DF:8F:35:D9:00:23:62:3D:43:1A:58"}}},"request":{"raw":"POST /api/visit?origin=sray-tkn.live HTTP/1.1\r\nHost: delegate-plenty.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sray-tkn.live/\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:11 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jbElf5EbnUwN6BXc1TtXLX5YEZA5Z4G5sNZgRR9s2p5k6kf0p0aRk%2F6mz3gUkOhltoUB%2Fl9EpwJRjlCjj5ohSI%2BgKLBkJUct3EPgzJLVvMzpfdxQDtfo8eiDOtOMl14v9n1zdmLvSC27AXL%2Bsie2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f048ca887783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-06T23:10:05.655847Z","times_seen":423111,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T14:48:08.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hoo%2FRFScXUI7sM%2FUdEGsff5zNValgFonWBmqRBHQixu9%2Bmucc7%2BGv1FVkLhpgEgvtKPHeoJGUZDQ33ic36GmS8%2F7PUegs6M8f9lKdYxCeKHsTzzskE8mlakPRUOy8Iug\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a04f047eeb1b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":29765,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4927)","md5":"60ac552d8f2a36f87927552fa1e53113","sha1":"31ad175e735715783a708f875d90c8649e6d6ae0","sha256":"575e537f0b5b183e92e6830ecf1052fb2105e31d76afce49a1cc472ba7148f11","sha512":"4993e60435725bbc25d9bb51c15df118e87bad56c981451ff95d7639b996dbc5db01481b57e1136080c4147b9f378e53e018d0d12c7500f457ad875ceb3a8bcb","ssdeep":"384:x9puFjIoWuHh+/EYHYMxMqukUw7vp8KM7/o63RiWhW5aW5tcmI1YhTRu2PF:xwE9hn4MvNp8KM7wcY5f5BI1YdR5F","tlshash":"c2d24132a51a243bb71785deb775373a31e7a25aea4300056bfc43e847c9dc7ec2a125","first_seen":"2026-06-01T14:48:36.475029Z","last_seen":"2026-06-01T17:47:52.659817Z","times_seen":3,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":52,"dns":29,"connect":1,"send":0,"wait":96,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/Logo_TROLL.png","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /Logo_TROLL.png HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 99715\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:16 GMT\r\npriority: u=4,i=?0\r\netag: \"699fe1e8-18583\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oQ7NcBcWqe6WXS7OZc%2ByyksJClRotP1FAqnpbDeg5u3wOitHj%2Bn59ECQ%2Bk%2FyijEL%2BuvUsbtmUZoP7h3Psn9v3M12HTpRLJaz1AMtBrxaGDLiWMzL2%2FKsDbNJ2n67gsB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f04809ba80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"f800d63c6138209d03b151b2017a072c","sha1":"811b3147140044f94e145601e80fc701a4cbad39","sha256":"c92c176f7b220bee3114c93202bc9ad34569540f9083675ecd312dcc5e1253af","sha512":"f6260013c54e652525f96e292fc49f0345a11830c2829d26a5b2bd9dbae99742a16a3553f090b1ad7a3b4d57c13406a621dfc592a12c313da70effbc34a35ca4","ssdeep":"3072:FTDe57agXXDfEvH24Z6uKHHy7I5/7WJnx47:Fe57aezbA9KHHyUU67","tlshash":"fca3129c5da16a88cd71d2ffb19128df0bd79e20daff13432508aa37f716999c4189a0","first_seen":"2026-01-19T15:44:21.069338Z","last_seen":"2026-06-01T17:47:52.661592Z","times_seen":58,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/Logo_pipin.jpg","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /Logo_pipin.jpg HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9003\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:08 GMT\r\npriority: u=4,i=?0\r\netag: \"699fe1e0-232b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ry%2Bz%2FTDcIps6bOhMI1d5kaNKKr4RuiweshZcMqfaLkAMTveplRaGuiFXrTZ6BkM%2BMEUPmGxYXGarNuWt1PIawOMNZ6kUpAAOZzYIAjfGnYD%2BTQ9WFZl%2Baqw4gerFbSK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f04809baa0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9003,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"fe599ea1d9553fddbcdb023372e36b68","sha1":"b2d17e86c12f655303042b6c6e2909fd20cd8b77","sha256":"fdad87dab824dc325fcee922e5b34fa269cc60dd27c8e3feccc03e79cb9fdf4e","sha512":"ad86f991f3cb85d14c841d370c6c2235caa46a64cb3a18a842f812b3baeea1f8dc5458dce978057ba8e29aa58614ff80d31f154ae846840a3203fa7d76a8f99b","ssdeep":"192:lgCe5fsV4azgFBY2CM/pBTIeGaHZAAJKRj3StPpznWa:laEV4VVCGBTd2jLSxZWa","tlshash":"b4029e1b6721468ed48083300a678d2b34f7fd73fad48f568e89e92cc2ba34dc606645","first_seen":"2026-01-19T15:44:21.061113Z","last_seen":"2026-06-01T17:47:52.665002Z","times_seen":57,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/script.js","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMk6MjudRK9%2BVr0s6qprpR%2BuqLZZhdJ95uM8Xz3OZtOIqKeWRixxv4YaUlqhp9xzb27U8G%2BmkgLwi7MuIsM5DuiSw5hC1L0Hemk47eIbZoqc%2BOQX85kM1J8lJnsk9N0h\"}]}\r\netag: W/\"699fe1da-4d8c\"\r\ncontent-encoding: br\r\ncf-ray: a04f04809bbf0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19852,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"bd1e7e44e9418e914da08efc982df6a6","sha1":"8bf5bf66971b4d272b81813d7b991a0b018c5bd5","sha256":"b18ab394854a070911d2d9fdb7194dccc9d0a3d9fbfaa48034c06880fc84ae94","sha512":"d20a3a1cd8689a5e6cc7d7a295b1fb67ca66a86e7756a630634794be855ffd383bdbd9b5d793f2fe9d53f2c4534266e3e8fc3359b66abc73c0f9335eb31ee1a4","ssdeep":"192:Fnw5JWGNoqal8nfwStPaXRlYxpdknXJ0mIH2QiYiVLKSiOSKLAPImccDmP3zTZjH:hIl8unNb36bW37E0IYP1cAfdk","tlshash":"4592642971f700710aa7707b835b668d3633005b3a4ace553d5e8b542fd0b64aaf2bda","first_seen":"2026-01-19T15:44:21.048927Z","last_seen":"2026-06-01T17:47:52.664091Z","times_seen":46,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/apple-touch-icon.png","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2898\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:00 GMT\r\npriority: u=6,i=?0\r\netag: \"699fe1d8-b52\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdId1vMe6ZqkuGFPmJtRH6lDeizgxYHlUSwpjvELprRolSZGAtSld6owZpqYDr6BQ7sSGCI1QBXPd2T5C%2B%2FLN1LAVOTD9uRHsgi0uBKkVbJhhErhSETZ998ngUkIqla3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f048819b40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"image/png","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-06-06T20:29:06.249532Z","times_seen":6596,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 392504\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T23:09:52.427356Z","times_seen":205316,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":139,"dns":0,"connect":28,"send":0,"wait":23,"receive":8,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/notify-visit.php","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:15.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"POST /notify-visit.php HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 01 Jun 2026 14:48:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9NUHWzPqGHuZQnAAK9MsX6MfCvSyzYAKzvu%2BGeQCR96eXCFiFqzHBEvJ7UinShGHFByGgP3nFQxU93uT%2B8xhzImXwKfVNGme7g11XzRkBQXO3iPc2Eyf2O5Zq5xjqjL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a04f04ab49d70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-06-06T21:19:27.713381Z","times_seen":11181,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/styles.css","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:00 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GfKCmBSfHFfvEB3z7A4lNFgRssRmySNyNqjvcfiLrZnjPgCzYlXVzbtzk0vNv7de%2BLD2iqFJ9tpyRr8eVOnDomPO%2FnBE3GNhM0cHXEhb%2BgfzhWKHcg%2FcHxMKkb%2FyYvk3\"}]}\r\netag: W/\"699fe1d8-140ce\"\r\ncontent-encoding: br\r\ncf-ray: a04f04809b980731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bcbfcf9cbbf94f40578dad65966879cb","sha1":"72d14f792763302c4cfd01c24362419217c353ad","sha256":"c3033e7228a017e18cae873c10f804c6305eb36e60e0237ed320af1438d6d067","sha512":"75aed19821f5c7a27a17d6d2b3a2cf4b538b2fe8c4db6bd5c17bc29343fa5a341212158e732185ee2a8516fd48f5ddcdc9f537a0784ecc2e1127e40466b9659a","ssdeep":"1536:G7HQM3w5DkTmq8U/+m3cUeEKEkiJoFxN3BaGkqkWuHSEA4DpKkyGvAZ1wTP2XESk:AgsMYWOYkhF2sJ","tlshash":"b183649a2aa31585b91bf5746fbb4796b35c8003c40ecd6d7fcd31888f442f9a992b4c","first_seen":"2026-01-19T15:44:21.068064Z","last_seen":"2026-06-01T17:47:52.667961Z","times_seen":57,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/css2","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1603\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:00 GMT\r\npriority: u=2,i=?0\r\netag: \"699fe1d8-643\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0cHo8BWwH8z1ype0g%2FAwV13DAg2Og9EPRygimBUADgWDBGffa3xvkXVpddt%2Bonpoh9KbUKwCTrdd8PFyB9%2BrtOcyGe8HMunvTizNG9ZCdROjY7JNMmnONw7C9KI9xJZ7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f04809b9c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1603,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"bc57f29a07ad7541da05194767520923","sha1":"7209670c9c5c4121389f2d4c5958c422705c0303","sha256":"697fbb0c065bcffabf55808bc3ac91ee0ccdcf868b7855eec68268e902d2e685","sha512":"764df0beb5c9dcd9f350ba6de7bf93c0cdfece729f5345a8a9c212402c1125123ce62d1d5bf360af32b2f92018f9970b9f6fb12b9ed4e48c162cbd30a9e4fc1d","ssdeep":"","tlshash":"c931d6a2011f9620de161eaa33cf7f2dbecd25481492c1ed87790cd59cea42b4349f9e","first_seen":"2026-04-12T22:19:30.191966Z","last_seen":"2026-06-01T17:47:52.660606Z","times_seen":14,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/Logo_phantom-logo-freelogovectors.net_.png","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /Logo_phantom-logo-freelogovectors.net_.png HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 14583\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:08 GMT\r\npriority: u=4,i=?0\r\netag: \"699fe1e0-38f7\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FxZZs0lFAH44GTq7w59DNYAw5nmMMTfw8ehI7waxk4%2FNwCO5qrJQxQ9z42KhhDGlt7v8%2BS0gZhU0kk1698V4Ntp8X3epkw8U%2BlwMVtvNpd8g4QonDIJWLHsFCB8pJNci\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f04809ba20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit colormap, non-interlaced","md5":"3a150f24c4c837300a9583b407ebaaa9","sha1":"3118cbc9bf4fa63b8c04371667b67cffbaf63842","sha256":"3b72a91ec3c659b28c42432dceb919cb52ab6c543363b86d6468b22628b96c0a","sha512":"29426d3f17f0abb5b5ccd6286e790f90cf4248094472fc22f7bd5e7a3b690b61d5e0e8298bbb44e504c34b3859f5bfb73a236724439b770efa429261a8d3cb2e","ssdeep":"384:mYtyB8PU5WPhzDOXJvkJIE6MdgMIg6pckFuCDnvj:mYUB8PU5W5H4cJIEhdgMIX5uCDb","tlshash":"2b62d0aedd2a3e4fcdd4017c09a79b2e04884b65f0255b1a78d6d53f8d72f19432d741","first_seen":"2024-08-20T08:27:54.736015Z","last_seen":"2026-06-01T17:47:52.661135Z","times_seen":64,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/favicon.ico","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:10 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:01:58 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FoRoRqcBcrWZoEJuMzZJcAa2LGmyFZWi7vYyzKGGJIynG4MMC2rFcoXn8AQjz18JORAn9YftEgVEtmTrQDqQHlgXhsynBFWEu55Xg7aPjv24zpHE1C%2Fx%2BoGwPGu10q5x\"}]}\r\netag: W/\"699fe1d6-10be\"\r\ncontent-encoding: br\r\ncf-ray: a04f048819b60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"2e1a20fb83891cec6f28e12d25889ef2","sha1":"f91e2a4c06c36c85a115b48ae4aefebd65f187e7","sha256":"268d96d6a0e6588d8b653c114c3a18c71eb93e9b18f630e493419ebefaed905a","sha512":"e7df33232cb7bb9efe3d6252fe6032ccae8b7b2ed25c51b71d08817a0165ee7e4174593ad29051d57a44d9a250dfd4c7436bf2f56916e4a5a4b28e1a6b387ee8","ssdeep":"48:QblysGOw1Aj/4LNoFAYTcgkrEX0z3qKPyUES0Kx95B3TPgoaIh+K8dnb56:Qblwy/qNoFhQy0z3xPR0KT7TI4+56","tlshash":"0a912aa1ed5a4ac4cc799e7568e82400876f3ee8ac245197d749f07349735743481c24","first_seen":"2025-12-22T07:05:49.896682Z","last_seen":"2026-06-01T17:47:52.669488Z","times_seen":63,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track077.top/track.php","fqdn":"track077.top","domain":"track077.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track077.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 19:01:24 GMT","end":"Thu, 20 Aug 2026 19:01:23 GMT"},"fingerprint":{"sha1":"6F:B3:5C:4E:9E:66:48:28:0E:36:D6:AC:6C:D5:DD:1A:F6:0B:E7:BC","sha256":"66:B9:D5:6B:C7:49:AD:81:CF:3F:49:E6:85:CC:9F:EA:E9:0D:D1:5D:BA:F5:7B:A6:75:CA:7C:73:86:F4:4D:19"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: track077.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 112\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 01 Jun 2026 14:48:10 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwyJOCC5b44rT2UxfyCi5eo2x8BXu5qrQ2h7X1GJD16R%2BaN1wWi9ZeDNa8zCCQliafJBY9PNQKbsBpDVpqx1s%2Fvsl6EVyw40V3A3JwrKHzkEMrI6LB7d9g6fpfX6uYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a04f04898aff0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T23:09:45.281132Z","times_seen":16194959,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 392504\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T23:09:52.427356Z","times_seen":205316,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":136,"dns":1,"connect":28,"send":0,"wait":15,"receive":9,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 392504\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T23:09:52.427356Z","times_seen":205316,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":155,"dns":0,"connect":28,"send":0,"wait":15,"receive":8,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delegate-plenty.data-repo.cc/_nuxt/assets/index.js","fqdn":"delegate-plenty.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"data-repo.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 20:17:20 GMT","end":"Fri, 31 Jul 2026 20:17:19 GMT"},"fingerprint":{"sha1":"88:F5:64:28:FC:16:B5:83:E0:DC:54:B5:6B:83:6D:F5:CE:FE:4A:DE","sha256":"8C:95:11:4C:0A:4C:BA:BA:B0:F8:52:AB:F2:EE:85:96:E4:8E:65:2C:7F:DF:8F:35:D9:00:23:62:3D:43:1A:58"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: delegate-plenty.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 28 May 2026 10:40:24 GMT\r\netag: W/\"6a181b98-ebe72\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1tQj45aEnmu1j86TFGH2e8VCBXMu1ChwJYaQDG7xOTEdcg%2BjrNtt1srKnZEcCNv45FU9JbQpOZ9knDtVkASlYxEmPYyu%2FzGO14%2B%2BJcBdIJ%2FgetDEddWEQnpK%2FLJs71LAtGTMxA%2FsLthY%2BFkLemh\"}]}\r\ncf-ray: a04f0480fbb0b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":966258,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62898), with no line terminators","md5":"e39a3777bb93718abd81ef93addc7878","sha1":"5946a477e4fa0b71174da6bf366a411d40eed41a","sha256":"b57edd54c4634d11b300e04005912786e6f8158ad4fa44f841e8573e1d5125ee","sha512":"ee9cddced1e45f0fe2583f265a391c5eca2ecee2d6b00e9b6e9beb851278bca696955199f936d11831b95c5296da13ddbe8657597913a06559f6af31e7dd886f","ssdeep":"24576:zOZGR9a/4ElGDrB33a3pe3M333F333h333D3r33u333i3Eo3g3znMEvg3Z3/3I3q:J3a3pe3M333F333h333D3r33u333i3Eu","tlshash":"e225c8fa72005bb7e2d12de53b990ca7288ed89094986c3461dbddcc6c6247af357de0","first_seen":"2026-06-01T14:48:36.498865Z","last_seen":"2026-06-01T14:48:36.498865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":55,"dns":43,"connect":1,"send":0,"wait":277,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delegate-plenty.data-repo.cc/api/is-banned","fqdn":"delegate-plenty.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"data-repo.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 20:17:20 GMT","end":"Fri, 31 Jul 2026 20:17:19 GMT"},"fingerprint":{"sha1":"88:F5:64:28:FC:16:B5:83:E0:DC:54:B5:6B:83:6D:F5:CE:FE:4A:DE","sha256":"8C:95:11:4C:0A:4C:BA:BA:B0:F8:52:AB:F2:EE:85:96:E4:8E:65:2C:7F:DF:8F:35:D9:00:23:62:3D:43:1A:58"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: delegate-plenty.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sray-tkn.live/\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:10 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=du1pGoydA0CgymDQB6W9W1pJpFCvukNhOnZb%2BKwtcN4P4ZUy6Di7dUeVZ5r1ULfo%2FSwmD9eTzdN%2F1P4Mvh1cuiOiJUq%2BTHd8PWOxkOTFylkJDjB6g5qSMJWySRIueO3sJKT1xb6Qbx2S1fCv1D%2BS\"}]}\r\ncf-ray: a04f0489cd28b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-06-06T23:11:19.83627Z","times_seen":114293,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"delegate-plenty.data-repo.cc/api/config","fqdn":"delegate-plenty.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:10.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"data-repo.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 20:17:20 GMT","end":"Fri, 31 Jul 2026 20:17:19 GMT"},"fingerprint":{"sha1":"88:F5:64:28:FC:16:B5:83:E0:DC:54:B5:6B:83:6D:F5:CE:FE:4A:DE","sha256":"8C:95:11:4C:0A:4C:BA:BA:B0:F8:52:AB:F2:EE:85:96:E4:8E:65:2C:7F:DF:8F:35:D9:00:23:62:3D:43:1A:58"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: delegate-plenty.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sray-tkn.live/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://sray-tkn.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:10 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5gfPn6vsOg%2B8JDbdqLOXRLWjQuPGMHVsThSnUj9B32NZ0xOR9DPaPkBHvM1Y%2FwfCO1GzRuIDxRpXn2qy4A2J8sagg33qnWTrsWvBFxXcgZDm6fISLvR%2BWp08bfErhpDuRRsNxlc5XgfAjW6KB0L\"}]}\r\ncontent-encoding: br\r\ncf-ray: a04f0489dd2ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"2498857b3325bf78cfc2ef9bc779ae8d","sha1":"3433d0f1b769c76161cfaef94c79a7e3a3713752","sha256":"00fb2f589d12835cfb5401984f3fe04bf539e4d566a732322a0e7e6b602e7175","sha512":"3b26e4647d0ccfb131aa3dc573faf111b4d537a364c56a52fd740e5b3a2ea7340d068bb7f097023e030c0fa51be546c180c8d7b7a92c2ea1d5bfe505fd3fdd12","ssdeep":"","tlshash":"8ad09523012509cc2bea25b5952edeb43741f1987d11e093388f57976acc055337f53c","first_seen":"2026-06-01T14:48:36.511163Z","last_seen":"2026-06-01T14:48:36.511163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/Logo_Alchemist%20AI.jpg","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /Logo_Alchemist%20AI.jpg HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16464\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:10 GMT\r\npriority: u=4,i=?0\r\netag: \"699fe1e2-4050\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVlFCBp6jmkCTc%2BRd31cSPddLGyj%2B0sksK26qxxpxjhfqaWCnusa4J1JOtnfwop90uKOZR%2FYkwk%2FRa208bANL%2FKdGronxajKRX6cJCVfJjP7byva45tN8tQ7dxbDTbt2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f04809bad0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"851f0e479c443128fa104dd9d2d577bb","sha1":"f7a5227b07a492700ce2109778127ac3245f6ba5","sha256":"6e9cd2be1f6f6d282984e25f59794ba4afdb6a2a7d683a97a2842e28ab479c73","sha512":"27c8a3ca7f48c8d6ca6ecef7caaa935d4657cefff6ea0e2f5e96dcd2bc3bf189484e929f67e3c5b03d04de670e99246d4f4b5ed43fe078367d0c4e5082855baa","ssdeep":"192:u5HTuBaj4xcEYATrpjRdKcQyX+OZ43QGwf8pVJ75iFAaMbCH8d7+XgTYh2CHr9OL:WMm4xFTrl2043Oq75ZOcd7o2CH8td/EA","tlshash":"9e72d0a723d61567eff3563b12400bed3a77b43d98fc4b1eb029a114d18d4f20a595e8","first_seen":"2026-01-19T15:44:21.073546Z","last_seen":"2026-06-01T17:47:52.668464Z","times_seen":58,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sray-tkn.live/Logo_QmXaRoMTAJ3PSgHkYrKgA9y6bvP5U9DBcvDmXTdvKsYPzY.jpg","fqdn":"sray-tkn.live","domain":"sray-tkn.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sray-tkn.live/","date":"2026-06-01T14:48:09.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sray-tkn.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:09:38 GMT","end":"Sun, 23 Aug 2026 20:09:37 GMT"},"fingerprint":{"sha1":"F3:5C:3B:5F:E2:5B:6B:EB:2C:32:25:20:C2:EC:76:74:74:7E:0F:C8","sha256":"61:8A:EC:79:DA:8D:BB:CC:45:24:0D:90:17:90:A6:F1:EC:32:FF:02:9D:7F:DF:59:7A:C6:8D:0D:36:19:21:C0"}}},"request":{"raw":"GET /Logo_QmXaRoMTAJ3PSgHkYrKgA9y6bvP5U9DBcvDmXTdvKsYPzY.jpg HTTP/1.1\r\nHost: sray-tkn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sray-tkn.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Jun 2026 14:48:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69340\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Feb 2026 06:02:12 GMT\r\npriority: u=4,i=?0\r\netag: \"699fe1e4-10edc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LpWpTIxpd1eV%2BpcRz6%2B5SVjNol3PPrG9m1%2FrPrj7iAPIlkFLKnxSGV0uLrhOE9xgD2Ip6lNKiwqoQD8P1hf7tTZTQmdbiGmt2KO7ScdesHHx6szrw%2Fsplm7JJL9ozkfp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a04f04809bb20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69340,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3","md5":"aa1beaf36b085f6acf69f44e6ebb52a4","sha1":"e41cc2092471b6f47a75e604fe7d548bf2c4728d","sha256":"ecb9b78abdba3a289d7ccfcaf69aaa1b8d78eabf7d44c094e03fc06247e98db5","sha512":"43078056ccfb96f2950e465c94b8b714f7efca2d8f1d5d1fc8af0aad92aa6289247f708feb64845a53e4cb57624aa30c6ea76fa4eabc100d1a2f78d8d0da3bd3","ssdeep":"1536:JV0XdmiWXIhaswqsrutl7bHSuNmjYQ5Nz5t1QAyOtzDWkn44f89ahn:70XdmN4hfwjGxb3N61/z1QlMz4A4M","tlshash":"ac6312905697233cf1c4d27555e62ef6bedf11ee4206ab90fd48b62e870a0d22f6c5a0","first_seen":"2026-01-19T15:44:21.074456Z","last_seen":"2026-06-01T17:47:52.663099Z","times_seen":58,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"sray-tkn.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}