{"report_id":"3e47b388-349d-422d-84da-13f3404e2fa4","version":6,"status":"done","tags":[],"date":"2026-04-17T08:16:25Z","url":{"schema":"https","addr":"apple-bonus-lander.pages.dev","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"title":"Apple Bonus - $1000 Reward","dom":{"size":27141,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (875)","md5":"b86d908f5380a2211bb500e21adf3708","sha1":"2cde7125621c0de07a1ef5fe4267dc998af49ba5","sha256":"2d865f07d223fa1bdd24b4bc71edc58bdc88bfc04dc02f3160bdef7910978a85","sha512":"956668e5242937f7d7fa69eb57047d78d3764cfd7754ecc4be529f587af8c7509f4f4a9f64e4693b93a3972a18d7a5c93e19aac1b6c90f76afb9c6a519c4068e","ssdeep":"384:BbDQYEu7eHVjd/gO//BbPn61Gz15rePlVaLzIfaI+t3+byBwv:4VjdHR61E15rglbT+9lI","tlshash":"cdc2c65f66b310567463a1b93ff7620a6235d003d606cc5d3e8d834c8f97ba589a3bac","dom_hash":"domhasha67d039b3524a8e4c8842b73e8d5862a","first_seen":"2026-04-17T08:16:28.734784Z","last_seen":"2026-04-17T08:16:28.734784Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T08:16:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"cycsrd.mcgo2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"apple-bonus-lander.pages.dev","ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-17T08:16:25.956086Z","last_seen":"2026-04-17T08:16:25.956086Z","alert_count":0,"request_count":3,"received_data":76247,"sent_data":1427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cycsrd.mcgo2.com","ip":{"addr":"51.24.4.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-06-04","domain_rank":0,"first_seen":"2026-04-17T08:16:25.954713Z","last_seen":"2026-04-17T08:16:25.954713Z","alert_count":2,"request_count":2,"received_data":8298,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e59c3954c48931c901af90303141bb15","sha1":"09fce484dc2a5da3e95c0a71116d6cc6737daf3b","sha256":"c029adcb84e1a1dc21e6c473cb0f3077df74e80b453554022badb175ac6dc57f","sha512":"c77ae4df8f3976fde5d3124644bc439d432846b1ef184183df86739c06a7ba6ebc8d5bb2c31e7b864a3916fe6af06db96bdb7bfbc0cd383a0255a67c7c25c9eb","ssdeep":"","tlshash":"84d02b8c390410a012b618f941ab820832b11148e842c65b955b80b82e30d57c88d92c","size":261,"data":"","first_seen":"2026-04-17T08:16:28.74099Z","last_seen":"2026-04-18T23:37:03.308045Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"916ad0fa94e96168c7f435be0ef44216","sha1":"d79377509484d95a3f7ce179cc009743a28f976f","sha256":"66cc13965eef7c64f9f4bdacca6f9930ee0c8db9550dcbe3f29ec167c524f786","sha512":"aecee3f177b7208c5f9e862b54438e2e10c49daf26e8a59d8ac6dd8bd820b7faafb674cc822fa2086afdb6df2b62c9eb64d3559bb041c19836c1bb8e8ef9910f","ssdeep":"","tlshash":"5701ac8f2c57a4ae13fb343e9b6bb605222b0b032042c5457e5e84102fd15661d42ace","size":661,"data":"","first_seen":"2026-04-17T08:16:28.742039Z","last_seen":"2026-04-17T08:16:28.742039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0e627631d3faf7447cb81534cf7e70","sha1":"9243bb19fac996c10d1d76f5988aab4de9b99849","sha256":"0a9ac6c060c958dd4fa632fd372f75d678e427f8a90532d47810a8b8fab7824d","sha512":"ae99d34dcd4fb09ed7362986b48930c16719422464983e576c00d51e1399d2e8ab8ce9dc222761c4543fcca8734462c3d37b45b1c943ac0735cddea89fcc52f5","ssdeep":"","tlshash":"8e1110a838fd549882aa62ae343fdf0c963d61275c50cc48a00ed1150b36e7bc442e3a","size":991,"data":"","first_seen":"2026-04-17T08:16:28.743051Z","last_seen":"2026-04-17T08:16:28.743051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa2c9a5610558c4736c306dfa723e7a2","sha1":"d812efef7fb6c60e3c9e9cd45e5404c3a7d2789c","sha256":"be4f593705cdefa6688e31879c52b4176662c702a915645dd9956366b940156e","sha512":"7108044779babfddde4d9001606ca2614a8a18c59c9dc506ac1a20514d4c11ebdef0bcd555caa11a7692d4a67499bd2698424a10879ec1e6833559cfc545b80e","ssdeep":"","tlshash":"3401c2b8dda4198252daa038d147b80620249183cf84becc378ccb5d4fe877551f835d","size":745,"data":"","first_seen":"2026-04-17T08:16:28.743901Z","last_seen":"2026-04-17T08:16:28.743901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cycsrd.mcgo2.com/t/t.js","fqdn":"cycsrd.mcgo2.com","domain":"mcgo2.com","tld":"com"},"ip":{"addr":"51.24.4.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"49ab0ab631394e16177e549531b01bbd","sha1":"9eab6eb4fc067a952de6ba95deae1290d67f221d","sha256":"caf86345b7e00da4792f75d1bdae4700eeb6ac84af2a00b03aaecd04684bdfb5","sha512":"0c6b0bcbc2cd3bfab976419e5c7ad0d15e3393ac93ec96269bba904c587bd2004a52c0064bee544d85012006c08be5594a50556fc0cd314fc2db3c9ae56dd786","ssdeep":"96:5w/+WmTi7PfrUBoJUGQii15qXxapdqOyqGeCzD4jhxjZiH/qWcJSMt8tSqqsCXmq:nEzEo+AioabGBz0GPhMtY0wLR3+oS/","tlshash":"64e1e8ca7452306907f7003065ef5a17a2366ba3294984a4d940ddf03db4bed523feaf","size":7144,"data":"","first_seen":"2026-04-17T08:16:28.737586Z","last_seen":"2026-04-18T23:37:03.302222Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5d83373688bd853b0d43144f30de8cc","sha1":"f9ad4654eea749fd61c682776850689c6553d979","sha256":"873b706b34aeb889a310a1660ee3f665e0cff9703bfee988253678058e984070","sha512":"49c5c7fecd0a33a0555df0b76ea0cc026c3eab5a645b6711ea1bd7f0e4613a72635d10fdae0d5c85d7ec9fd1172e02ecbb3d2d4b7b07cf9533c1492a8771fa80","ssdeep":"192:b/CPXNBwD/FYmyI4/caIm7CqFt3+fjIy9mBkL7O6A5I+7savr:TaLzIfaI+t3+byBw6","tlshash":"1022560e63f71576a063917f1fab204916729103b906dc4e3d5dc3088f67a61dea6fb8","size":10660,"data":"","first_seen":"2026-04-17T08:16:28.744654Z","last_seen":"2026-04-17T08:16:28.744654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/applesquare.png","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apple-bonus-lander.pages.dev/","date":"2026-04-17T08:16:04.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apple-bonus-lander.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 04:18:20 GMT","end":"Thu, 09 Jul 2026 05:16:40 GMT"},"fingerprint":{"sha1":"58:66:E1:3C:98:83:34:C5:C5:CD:99:F6:8A:DA:80:19:A1:F6:FD:82","sha256":"C0:A3:FB:36:78:5C:63:0B:08:19:B4:85:12:D0:7F:E5:F6:8F:DF:22:C1:65:E9:A1:53:55:B4:CD:27:92:F9:BD"}}},"request":{"raw":"GET /applesquare.png HTTP/1.1\r\nHost: apple-bonus-lander.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apple-bonus-lander.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 08:16:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 20214\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"119edf95ac5607edad8883c67a34f894\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBs0oQW2VrqrR3jVKf0Zg3KOEEdJWJEkO38Rey1JE29ULfOX4ijlF6Y9asQjRClCol9he3uGLiIWZZ0u20ywodlt4s1I4ajnTWimBpw431zKnDQYN6kz0yQWDZjgbaa7sI%2B0oYRiTMzkEsrtUnkt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ed9fc4d0fa6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"61b2cac6d3c3e01a188b80df45bb5b31","sha1":"8ecd0a9d3bbc871ee7573def82b4a22b967cb780","sha256":"1ee77e9da05aac42f8d69486f6d72a609a4a0d316cd7b272b9d853f397f62eea","sha512":"8cc38817b7746a175ea16b2b23bb8860f226c84517e88b8558809bda77f4f472aabad1112a8ee4ddf2ad192bedfb06a3e9b5734990f4dd59002a78ccb67251ba","ssdeep":"384:046g+p5/n7qFSsCN8+YXM8d+s1BBDYMLJW4vhGyACLTQ:v6g+p0FSsCNkM8IOTJ1GyPTQ","tlshash":"4792bfb7c1b7986ba06017718d44ed18e16a2e9a48bd7fa0f4cafc7536bc3d81c1254a","first_seen":"2026-04-17T08:16:28.736404Z","last_seen":"2026-04-17T08:16:28.736404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cycsrd.mcgo2.com/t/t.js","fqdn":"cycsrd.mcgo2.com","domain":"mcgo2.com","tld":"com"},"ip":{"addr":"51.24.4.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apple-bonus-lander.pages.dev/","date":"2026-04-17T08:16:04.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mcgo2.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 04:14:19 GMT","end":"Fri, 22 May 2026 04:14:18 GMT"},"fingerprint":{"sha1":"0C:38:5A:89:C7:CC:BA:17:57:C6:45:32:B6:34:9E:25:6B:71:EB:EE","sha256":"54:40:77:AA:8C:19:B7:36:95:C3:FD:7F:63:9C:70:76:87:8C:EF:8C:61:12:CB:E8:97:1C:9C:AB:E0:27:E4:F6"}}},"request":{"raw":"GET /t/t.js HTTP/1.1\r\nHost: cycsrd.mcgo2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apple-bonus-lander.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 08:16:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3168\r\nserver: nginx\r\ncache-control: public, max-age=600\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced\r\nx-robots-tag: noindex, nofollow, noarchive\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7144,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7144), with no line terminators","md5":"49ab0ab631394e16177e549531b01bbd","sha1":"9eab6eb4fc067a952de6ba95deae1290d67f221d","sha256":"caf86345b7e00da4792f75d1bdae4700eeb6ac84af2a00b03aaecd04684bdfb5","sha512":"0c6b0bcbc2cd3bfab976419e5c7ad0d15e3393ac93ec96269bba904c587bd2004a52c0064bee544d85012006c08be5594a50556fc0cd314fc2db3c9ae56dd786","ssdeep":"96:5w/+WmTi7PfrUBoJUGQii15qXxapdqOyqGeCzD4jhxjZiH/qWcJSMt8tSqqsCXmq:nEzEo+AioabGBz0GPhMtY0wLR3+oS/","tlshash":"64e1e8ca7452306907f7003065ef5a17a2366ba3294984a4d940ddf03db4bed523feaf","first_seen":"2026-04-17T08:16:28.737586Z","last_seen":"2026-04-18T23:37:03.302222Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":101,"dns":17,"connect":24,"send":0,"wait":36,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"cycsrd.mcgo2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/favicon.ico","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apple-bonus-lander.pages.dev/","date":"2026-04-17T08:16:04.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apple-bonus-lander.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 04:18:20 GMT","end":"Thu, 09 Jul 2026 05:16:40 GMT"},"fingerprint":{"sha1":"58:66:E1:3C:98:83:34:C5:C5:CD:99:F6:8A:DA:80:19:A1:F6:FD:82","sha256":"C0:A3:FB:36:78:5C:63:0B:08:19:B4:85:12:D0:7F:E5:F6:8F:DF:22:C1:65:E9:A1:53:55:B4:CD:27:92:F9:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: apple-bonus-lander.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apple-bonus-lander.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 08:16:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nlink: \u003chttps://cycsrd.mcgo2.com\u003e; rel=\"preconnect\", \u003chttps://connect.facebook.net\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wz9DimeaFQd8LAy5HyV%2F4p1CJXdhnu%2FgXjoJWgh%2BmSyWTU5C27LwkQ5h4wm3tfT2etunuE1IC3nnFth2K1QZ31GCo85jK8Q6ljXyl8cDXlz3dE2qi%2FuMD4np6MjLhRmuNqpPg%2Fis9uQhi2pWuiBc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed9fc4e2ae9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26848,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (875)","md5":"96fca08753325f2425e50b432cb371f0","sha1":"081b52efcd3720ae5029d5454d58767a79b11dd3","sha256":"9ee9c532159aae4f3c38c4818bc91c0fe9ca9186023940bbbefe8986d744fc9d","sha512":"b0b5b5035bbc5f61529c03fab779d1da9a3468455124e2fa1483823fc67042b269df1af6e8fcb1dcbd5e1409f505af3fda3702179d2e152d57fcaf8ef82b3c77","ssdeep":"384:3bzeCwjd/gO//BbPn61Gz15rePlCaLzIfaI+t3+byBwT:1wjdHR61E15rglkT+9lo","tlshash":"77c2b75f62b3105674a3a1b93ff762096235d003d606cc5d3e8d934c8f97ba589a3bac","first_seen":"2026-04-17T08:16:28.739086Z","last_seen":"2026-04-17T08:16:28.739086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cycsrd.mcgo2.com/visit/log?pl=https%3A%2F%2Fapple-bonus-lander.pages.dev%2F","fqdn":"cycsrd.mcgo2.com","domain":"mcgo2.com","tld":"com"},"ip":{"addr":"51.24.4.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://apple-bonus-lander.pages.dev/","date":"2026-04-17T08:16:14.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mcgo2.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 04:14:19 GMT","end":"Fri, 22 May 2026 04:14:18 GMT"},"fingerprint":{"sha1":"0C:38:5A:89:C7:CC:BA:17:57:C6:45:32:B6:34:9E:25:6B:71:EB:EE","sha256":"54:40:77:AA:8C:19:B7:36:95:C3:FD:7F:63:9C:70:76:87:8C:EF:8C:61:12:CB:E8:97:1C:9C:AB:E0:27:E4:F6"}}},"request":{"raw":"GET /visit/log?pl=https%3A%2F%2Fapple-bonus-lander.pages.dev%2F HTTP/1.1\r\nHost: cycsrd.mcgo2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apple-bonus-lander.pages.dev/\r\nOrigin: https://apple-bonus-lander.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 08:16:14 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 86\r\nserver: nginx\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 600\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced\r\nx-robots-tag: noindex, nofollow, noarchive\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8de635e4d993dc45b397b96d161724f2","sha1":"47afb7277b4b5a349509bd133f244bf60be67fa0","sha256":"132fe09beeeb2c6a57072fb7d0d9fd47e9d07493439553d5806dea16e994681f","sha512":"6a2acde02623384e68366427e6b426dd811d150a436e43a98c32861088a616fc087f3023b8ea65ffd958f1756c37aae25885c8dbc6b110118772d48ab5f28eef","ssdeep":"","tlshash":"cea022a830820200fcc0c8ff3032220380f88f030c038a8a00b0ebb020f82b823ca2ac","first_seen":"2026-04-17T08:16:28.740095Z","last_seen":"2026-04-18T23:37:03.304957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":105,"dns":3,"connect":24,"send":0,"wait":41,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"cycsrd.mcgo2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apple-bonus-lander.pages.dev/","fqdn":"apple-bonus-lander.pages.dev","domain":"apple-bonus-lander.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T08:16:04.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apple-bonus-lander.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 04:18:20 GMT","end":"Thu, 09 Jul 2026 05:16:40 GMT"},"fingerprint":{"sha1":"58:66:E1:3C:98:83:34:C5:C5:CD:99:F6:8A:DA:80:19:A1:F6:FD:82","sha256":"C0:A3:FB:36:78:5C:63:0B:08:19:B4:85:12:D0:7F:E5:F6:8F:DF:22:C1:65:E9:A1:53:55:B4:CD:27:92:F9:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apple-bonus-lander.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 08:16:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHfZGMAC7gy%2BGPM3syYUhtKEm%2BLTZxTuXYnp9BwKdDsh7uLOgdxobBpjilaVCUnNr7rUcHjdO8%2FRHBLjaqZVhwGZuHlwTXB64qFKgBSnAXZpIDm8G5bNUyO1iFyrK0oEuejb4WDlFIQqSj4pal8w\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed9fc4aacf31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26848,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (875)","md5":"96fca08753325f2425e50b432cb371f0","sha1":"081b52efcd3720ae5029d5454d58767a79b11dd3","sha256":"9ee9c532159aae4f3c38c4818bc91c0fe9ca9186023940bbbefe8986d744fc9d","sha512":"b0b5b5035bbc5f61529c03fab779d1da9a3468455124e2fa1483823fc67042b269df1af6e8fcb1dcbd5e1409f505af3fda3702179d2e152d57fcaf8ef82b3c77","ssdeep":"384:3bzeCwjd/gO//BbPn61Gz15rePlCaLzIfaI+t3+byBwT:1wjdHR61E15rglkT+9lo","tlshash":"77c2b75f62b3105674a3a1b93ff762096235d003d606cc5d3e8d934c8f97ba589a3bac","first_seen":"2026-04-17T08:16:28.739086Z","last_seen":"2026-04-17T08:16:28.739086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":22,"dns":7,"connect":1,"send":0,"wait":229,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}