{"report_id":"3ec61842-3836-40e2-b1e8-438e89b60bf6","version":0,"status":"done","tags":[],"date":"2026-09-13T12:40:31Z","url":{"schema":"http","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"172.67.144.178","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"title":"Поддержка Steam","dom":{"size":42578,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (344)","md5":"ad26642e8754050edb8d35d05a001c08","sha1":"61f259ba97fd1bdb6ae3805b2525492114b231b6","sha256":"2878fd44f95578e9641f9e3a1d79c7fbb059b95d3c291ba955f4673f0d18b329","sha512":"2a5a05c513669a7eb5c3eafa495ae09b0d35740a6bd379ae3c06dce825acc19e4e3b1bcb2d46b25099cb55f47bd337359aa9b9b0ba23a5e34f41bea8a5e58f64","ssdeep":"768:9PBEfLkNEG3QekWS2GpIt8opBJJLkNEG3Qt48uq2qo2KATtgn6yf5J3eORpPE/:9PBEfLkNEG3QekWS2GpIt8opBvLkNEGq","tlshash":"6313743198f154374246f186ea357b1e7dc2c1abea0e8a503aec0add6fd2c91c67720d","dom_hash":"domhashd56f9d9ab39a6ff233795893cd9d436e","first_seen":"2026-09-13T12:39:59.816953Z","last_seen":"2026-09-13T12:40:33.885883Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"172.67.144.178","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T12:40:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"id71841.info","ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-13T12:39:54.210232Z","last_seen":"2026-09-13T12:39:54.210232Z","alert_count":92,"request_count":23,"received_data":1575601,"sent_data":11077,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"waitingpanl.com","ip":{"addr":"45.144.53.193","port":443,"asn":0,"as":"","country":"Slovenia","country_code":"SI"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-05-08T03:01:45.67226Z","last_seen":"2026-09-13T12:39:54.99386Z","alert_count":0,"request_count":1,"received_data":412,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"help.steampowered.com","ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-08-09","domain_rank":11249,"first_seen":"2015-06-02T22:49:13Z","last_seen":"2026-09-13T12:39:55.086932Z","alert_count":0,"request_count":5,"received_data":119971,"sent_data":2862,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"id71841.info/index_files/jquery-1.8.3.min.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-09-13T14:40:44.034741Z","times_seen":38351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/help.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1ab5ddee15ff58e849884f1e5843ad","sha1":"add2797fe4c4d57758cd4fde62bbf75af0fd021f","sha256":"7708b23d607ad8d1ee6817d8be643ae012647566a6f519f293fe7d42000e6aff","sha512":"0618703a49b6a4fea4a259476ef5fc50f01e1f272a9b92dc67332c6f8cfed282b54f923a3fae6da4184dca4becf840cc776911ef1f980e02a74ce9396147f7fc","ssdeep":"3072:HTxNL5q5DBp2adtphUswEHV8NLIpuO2hNL7mYB6nwGjvjCbaIbEclurT:HTxNL5q5DBpJtphUswEHV8NLIINL7mYs","tlshash":"dfd3e6d4eb5d249e4431217ddc5e28cc393e49bb7a0609a77cc8127877e192e933af29","size":135069,"data":"","first_seen":"2026-07-06T14:55:45.207108Z","last_seen":"2026-09-13T12:40:33.903669Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0be5ea3c4ac500422abc46b89b3e58e3","sha1":"e8e88e5eff6c7ebe1d6a55b23cd49cca3793d176","sha256":"de9b31ddce13e66f2743e67f68993f239f895c0d6b22f7a45b6a5da972004fed","sha512":"5f8394033c200f9eb9932e3b4ff0ddb303f97a61388f6f5394f765ee2c8c296cf0f6a59e68c50b0ae34004537d41209fdfa8d0c5fd9f9d2cfe8271ed38b63a25","ssdeep":"","tlshash":"80c09b08b472fe90479315a08459431df1141517d429fd50b97cccd08f11015118054e","size":133,"data":"","first_seen":"2026-07-06T14:55:45.237812Z","last_seen":"2026-09-13T12:40:33.917943Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ed6fe4b6a4d8cfd17871d91d3a837f6","sha1":"a6d5553eb937cb129e4042a52d316e683d15a2b7","sha256":"544baa1691b99c9af31a94a33325971f6f91973af6aa95aff558b1757cf20cb1","sha512":"6b92365800cd36c2c7c18477cf933bacba1628fe3a178b1c9cd029ae53f7c3f61fcbfac58258c81ef035d9b17df6d0e0c21dfef70c49294321a0a5c31cb5efc8","ssdeep":"","tlshash":"2470000c388080288230280ea0380328a882038f0020e280000e080000082882aa2038","size":25,"data":"","first_seen":"2023-03-07T12:12:29Z","last_seen":"2026-09-13T12:40:33.919256Z","times_seen":1012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"002a315aad7f92782241fd549262b6a4","sha1":"2b084a170afc623df7048ce19fd74c2a05bdd938","sha256":"af35f63b9306c671ff1baa24b3e260b6295ae79d9f33dcf68a988f9284a4c53f","sha512":"348c5203a67743de9f5d2237842f348ce68d02a89d4b49f5fbe8bdc2c19da423f6d2887aae34c5f182e13678b6f64b97145356424fe9fbd0d16020e0d29146e4","ssdeep":"","tlshash":"bba0026911581864438577efc067707ea90b254f542ed186550513a1c141674539613a","size":64,"data":"","first_seen":"2023-03-07T17:32:18Z","last_seen":"2026-09-13T12:40:33.920443Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"687f6d4754817414cc9c8adb56f22efd","sha1":"0096d192319c3dbdf8b1051c0286d1b8a42b887f","sha256":"3d42be51c099ce1a624754141e827fd6049c76afa0a440438d7d609915063a71","sha512":"4c003053f5a2f2cbb932854825348a3128553a9089f21482f7debb18cbc22c6fad65e3a7e02c5b2c02a2540aeb3cd1f11cf8cc91029af817cc2e2dd8cb863b3d","ssdeep":"","tlshash":"10d0a90ff1bb1151003b3c809a8b37286c9110574ec49a7e3f0c82e01f2c02a231230e","size":270,"data":"","first_seen":"2026-07-06T14:55:45.241059Z","last_seen":"2026-09-13T12:40:33.923228Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ab551af9b50ea6c9f3909ca540b0b61","sha1":"7b598a68f37467006da617bd9a37c5823ae6b031","sha256":"1f2c47be54f956839ae47db645360168f68fbbd59ac6afe8ae66d262c9cdd742","sha512":"b2c46710191f873c54b44e12a976be46becadec08b388a2bdb37a22cba3ba79e64fd59df11b507bab53d8cf03660fb5d0b51fb176223b550a76df06d8faf1fb9","ssdeep":"","tlshash":"8cf0265aaf612024d222c6aec40ad2852531800b8cadb8303b2ca3440f5d22dd3b2b89","size":465,"data":"","first_seen":"2026-07-06T14:55:45.242679Z","last_seen":"2026-09-13T12:40:33.923866Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"54194d4e5bfbf535e67dc68c5414e167","sha1":"67a302503c01534b14dba3b1d20cfed9907b1f1b","sha256":"9f50dd235970a88ba94395e7037a267ed667eda36ef08e3aecd39572e67f6493","sha512":"ec7260509fe1efb2b6edf9b0b2caae77e94de9cd8326a31e5f86f58f49567cee9fa20cee1799f172b0be7cfa4a0bc02093c179df0644d6f17ad75ee06d8bfcaa","ssdeep":"","tlshash":"28c0120b00449130c367a23cfd2fe545811400c31247c9b13f0c52042f1847c4162b58","size":171,"data":"","first_seen":"2026-07-06T14:55:45.244104Z","last_seen":"2026-09-13T12:40:33.926032Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f235d42d249e437447a25407faf78674","sha1":"5de70bf34661e817a4b95b5969d1b5f0b3813784","sha256":"809777704b07408802f66480b025780f945cb49158e804ecd4c95e343585053a","sha512":"560aab7cbb38da8f8b8420703178256b966b04b06b0b94e2082dab7ebe390e1daf980f00d33d7d361dffa1bf92850a503e6c732bfddf98492aacc1a8c728e576","ssdeep":"","tlshash":"6831ce06e1b2f8e80ba3f03dc7591221a010c2834458c9487fcd7b57afada39e3b8d80","size":1693,"data":"","first_seen":"2026-07-06T14:55:45.245114Z","last_seen":"2026-09-13T12:40:33.926689Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2a591a8607d25504b29109a5804530f","sha1":"7274f32b5a9b89c830a2e3a47df7c87739c4c767","sha256":"645e03a0f0843d8206930ecaada1dce8e27988c9e9a46cce774f764844607087","sha512":"598cd04fef325b1de2f66836456a3b091a4632b3a46c870c6b6a2c98b5f1ce4c7ba2648534549aab5c49110e45ef5b238f64f3c1c8b08ce0d89e9cec9d19d244","ssdeep":"","tlshash":"27b01204c40f05a13404501407b90045c65001123801f444372ed0350f8050244fd1c8","size":98,"data":"","first_seen":"2026-07-06T14:55:45.246057Z","last_seen":"2026-09-13T12:40:33.92848Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58467e738489f2cb107869c670ae625f","sha1":"ffd2ff6918f4a713e04382588a3531221cde391e","sha256":"3aa5ea24fe372a4809309904ce0649029ca775502ec3486100826b2d31ac86a4","sha512":"0016b13e52217cbbccd28e324c6831e31ecb71cde96474cd41f59b60dd6f562713fed5e39fc924e453fe6eec9ec82fbf3968b20922f13ef3d0bee99ef2235efe","ssdeep":"","tlshash":"4de0865a5082c54692d34ca41ee75204953038db659cb416394c4a225f0ad1f47b7dd8","size":404,"data":"","first_seen":"2026-07-06T14:55:45.246944Z","last_seen":"2026-09-13T12:40:33.929383Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"115295a31c4ba0ac1f6a4b9f81e9caa6","sha1":"2bcd89d7cfd8e7744f4bf94876a71b71919faf8f","sha256":"26f04c3607b40050c8f5e333f76f2f085a8db1bd9c219fede48b3420e493c98a","sha512":"9457602b88f7797d558fe631defc8fbaf760cd0ed1e199d4a4e6558858a047fa66c093fb5834b427ed876d7620fe1f73e3bc96f5fc06de73607e5f8a4f49dc56","ssdeep":"192:dFmi7iVhyA0rR8J74CpAUxiO1pvaETxiN4OT5iNtqj:zmi7iOR8JsMAai+vLtiKO1ic","tlshash":"43e10f6aaab214b1596bb07e0bdf66847074c1db9408ce003d4ccf859f45c6952e9bea","size":7189,"data":"","first_seen":"2026-07-06T14:55:45.248077Z","last_seen":"2026-09-13T12:40:33.930119Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/shared_global.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68d0635ada12f979e7d3e1c240bc6b63","sha1":"04e472e36b0b745edcedd186213642511f2674c7","sha256":"cdaae9faffe069d88c9c2b87c3cd8305c8e416515160f3ebcc8f0f1108640ea9","sha512":"4e772b19f5b403a7396a58cf1ae0b70d271fff91d8af5e5748eabafc4e5a53574fd6476f467ab42d702f714cd2314ecbea8b57c1b9b460c0dd2e7b5e590acf7d","ssdeep":"1536:0v99zRW6Q2hNJRNhjmciMQzosXmDecTVbiqD3YHI1Sp6D3QgQDrMTAQaOfXkwCMb:A/5jmciZos2DeclP7YHNgOGXRt","tlshash":"c5f318d5eb7c112a897a302ddd2f504d3a7e1832b00469297c5e94d86ae0d6e43bbf7c","size":159875,"data":"","first_seen":"2026-07-06T14:55:45.215407Z","last_seen":"2026-09-13T12:40:33.902972Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/shipping.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68101a352dae0184238f221b3250b8fa","sha1":"ba43eacad47807112c9403e972b9ea5bd11e8fc4","sha256":"91f15c60a42c895a4003d869927da7066a715c672ff494cb0ddf29026d4807aa","sha512":"b6efbfa6d47669d96c8dd33f7e6d98fab8b90a323fe9083cbbe464af351431352c947ac49628ec8aeac5b5ed16f4b8647f5fbed2d251d176b1ae9c94d1056e6f","ssdeep":"","tlshash":"c9813000aaf516597e2d33b1587db3175a5827e03b8f0872f07c7395ba90e25fe3a502","size":3866,"data":"","first_seen":"2024-12-31T17:07:45.18009Z","last_seen":"2026-09-13T12:40:33.898423Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/main.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f65a4345bfd77680372a0ac7b379e5c3","sha1":"94f1669be6ee3d951621660d883e418acb5f71e9","sha256":"1867008a2a6ca1de656065c1dfce828356a5826fcdbe34a3668e2e51813d48b7","sha512":"337dc1fc57cf7a06d544d65cb0e6620d7a96a1d94cea09ae0c05a3d61d061eaa52b599efa6384588af56a0d4d4d93f9030498fa967d85f82d037165859669ec4","ssdeep":"192:+wrJG2AHVDFDlDFuDIUYokzdqSmKmqYAwuAjxHYrIJ/vbZzzGyUwta4X8LcVB3D:+wNG2AjrRwPqouAjxHYsJ/vbZzzG+Z/z","tlshash":"c042f6e8327c7e7316a136a601778510d62170632c0f5da4b38eddf668aaed16327f72","size":12957,"data":"","first_seen":"2026-05-05T09:25:57.965748Z","last_seen":"2026-09-13T12:40:33.900566Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/shared_responsive_adapter.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15addec289a89408ca46b9b15797149e","sha1":"7004276fab8e3c4ae33f1c8919d102eed1084955","sha256":"5edcb9726fdc97f8a01d5948f7eccfb279a51de6c0e610e38d2225434b0f34b4","sha512":"e7021e8f334cb7816ecd258ff9a72ca76db8214abb96b208b58397c193a602049f07073173930e37bbed09b4c05d314a8d6318f3df0e33b55d12e10c96a766b3","ssdeep":"384:0GUcz6olWst4anMMY5erCGgxEQx/kjHBc2gdXf7h6oq:0G7z7Wst4wYkuBEosjHCNZ7A","tlshash":"f7b2b5a9f75e12768179331c6e5b348e32bd84f8710aac827d60255c3aca54e43e6f4f","size":23695,"data":"","first_seen":"2026-05-14T04:43:00.991826Z","last_seen":"2026-09-13T12:40:33.907789Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/dselect.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e6f65501c3ad292b47328ab6ff5f7a6","sha1":"c78f61677b816a7263f9b179d2acba4fd4a5c2fe","sha256":"14641702e19d6cd25012020f2f8d7ff3d334dcecffbe7291abc53a7dc046b546","sha512":"a356e26e7cfd7c92f202de90952bd7167d0a6bacff50c6a88e38ff1f09424548e5a162a8d90ba933ff81481a877dd664779a26c31b5e0e325b7b07bf7b6beb20","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gEC6b48kgsaWEE+WTZ0VNM9CY94jiv7ksB:MhOdLSwcbkg8x0VNM9Cm+yoQ","tlshash":"4522a850b32c17e910be00bfcc895de8967ca9f68c0358a2bd5881ac75d45ab13fdc5b","size":10720,"data":"","first_seen":"2026-05-01T20:10:36.07722Z","last_seen":"2026-09-13T12:40:33.89311Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/3tkiiddb0026.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32bbf0d6f62385da1966127dc1b16946","sha1":"13997b110b4df5d462ee4e10a386f33b592abab8","sha256":"5705fd7c892aaa6aa271271bf02df913ab316e1d28fd95706b150b3736b85456","sha512":"0648d9d1affeed17127c20e6d655818ce0262c40faabffd70a0e718f738a5864ea7d5d0af22e9797b2908ec54ddd92213a1b316d26736d10da5e882b9c01e559","ssdeep":"12288:ZfJWQkPYE78MHDlxcNtn/TUS5pC8tFz498E:RJ6YE7bHD78oX","tlshash":"4394c5603bd1ac58139b8b7bb32bb4e5fd5e185f3c44089bd200fd906599626faf2970","size":418548,"data":"","first_seen":"2026-09-13T12:39:59.891152Z","last_seen":"2026-09-13T12:40:33.894988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/tooltip.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93995e3bb315bc0695254d745e88d5e1","sha1":"206782432cbbafa347e32cd5c19775a701faef83","sha256":"39cbe8d0785370b4ebda08f844727ac3a6fc5cab10bd26cbeda5dc36ff4166d0","sha512":"b6e8c9675e186e53a54a40e45ee78f6025b0ddc3f067f6f0bef67fef3ce5f30cce2d0be18b7457e05ff397ef8c301ab5bb07fe53fcf61e11f65de9f872f361d0","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubK:h3ug4R4svlBEJpocOFJ2eu+i9","tlshash":"ec826591f73d20ae407ab3be896d2388b33e40b65161f8757d7886743a4e4970392fe4","size":17568,"data":"","first_seen":"2026-02-18T02:21:57.511284Z","last_seen":"2026-09-13T12:40:33.912514Z","times_seen":601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"id71841.info/index_files/footerLogo_valve_new.png","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.352Z","timestamp":1789303200352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/footerLogo_valve_new.png HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Sep 2026 17:26:15 GMT\r\npriority: u=5,i\r\netag: \"6aa58b37-8ed\"\r\naccept-ranges: bytes\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxngRVbtfPdLuY%2FPIOqH%2F%2FuAz%2FN96GbKx5p%2FG%2BBo%2BtlRHvKOBV6KoGvxEuosmPJm1aqneaIA6HHpUNFou5zBklLiGp9lR3PZWvMOzMumok9VwnbwUZU7EYb%2FoKAwA7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a737ca3f0356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2285\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2285,"size_decoded":2986,"mime_type":"image/png","magic":"PNG image data, 184 x 52, 8-bit/color RGBA, non-interlaced","md5":"5cba6abf67ac92684a4782b891a69c9d","sha1":"d560912d1fecebbed7b18b1c472c70f70080bcee","sha256":"ff991cd769572478cdc67d22980851f2f4f028b009445f8e9251e84f0a2aa41c","sha512":"0393790799dd0b93b565c763fde339a6a66e462d72cb82ba8867c6c2fe19c10fd436d339a14287b7fd62c297dd2dd44cdcb8e6125e2eb2193c2c90281a360e2f","ssdeep":"","tlshash":"bf4139cec08ea41678fba99358546eec2a16d29bd8d158f00d98288d3561c7d57fc224","first_seen":"2025-10-15T17:17:10.867018Z","last_seen":"2026-09-13T12:40:33.888413Z","times_seen":1076,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waitingpanl.com/djnxnkufkompmkpbcfmbktlndcxaadlicwtwikukxwicjn","fqdn":"waitingpanl.com","domain":"waitingpanl.com","tld":"com"},"ip":{"addr":"45.144.53.193","port":443,"asn":0,"as":"","country":"Slovenia","country_code":"SI"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.674Z","timestamp":1789303200674,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waitingpanl.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 15:53:53 GMT","end":"Sat, 05 Dec 2026 15:53:52 GMT"},"fingerprint":{"sha1":"92:B7:97:CC:4F:5E:C3:E5:C4:4D:35:86:07:CD:84:35:AC:89:B1:62","sha256":"F7:A0:EE:02:2C:7A:F5:C5:4A:84:D9:0C:39:02:AB:E9:2E:FF:BA:8C:17:82:B7:99:31:36:E8:B6:E4:E6:31:7B"}}},"request":{"raw":"POST /djnxnkufkompmkpbcfmbktlndcxaadlicwtwikukxwicjn HTTP/1.1\r\nHost: waitingpanl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 150\r\nOrigin: https://id71841.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":150,"data":"d=id71841.info\u0026u=f-mtzsxdmd-8b56zkkb\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 67\r\nETag: W/\"43-8hiwSsrIBri2dFtro83yjzaHHZQ\"\r\nDate: Sun, 13 Sep 2026 12:40:00 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":67,"size_decoded":412,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"afd16e750517d7746feba1240aac794c","sha1":"f218b04acac806b8b6745b6ba3cdf28f36871d94","sha256":"1e161ef7e94250d3dafccadf40bbb620cd2c7789d74c3245b71442e4e1e50e23","sha512":"3220abfef4a92e558f311ec97e1c42535931cb2cec0e3b849a60ab116e58f973a5f6639862e35bfb0cb7b06583442aa164f6f75ff28c3ec467a9a4e92b2dde5e","ssdeep":"","tlshash":"27a00266855061fd8a03090c834f2e004b7c00376dc464c7f01c0e8951f147bc525133","first_seen":"2026-09-13T12:39:59.864975Z","last_seen":"2026-09-13T12:40:33.890132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":3,"connect":41,"send":0,"wait":160,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T12:40:00.076Z","timestamp":1789303200076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 12 Sep 2026 17:29:17 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=658XWkSC%2BVKtlthGUpiwiZm0l3%2BK08sP1IAhO05AhTaF6i9u4Uy7VMlnC4KDflTOx95w5hTWeJAbvku3dZqH9NT6vCUoKdhGnkAoOBc2AJisd4X50s4FybSUJIPrxkQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3a737c8aeb456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":48310,"size_decoded":10511,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"22b22c19793107a5b2af95f40f0a5215","sha1":"705afc17731089679116e1f20163d1ff47c85417","sha256":"95dc83e327f7b44340f5c0eab606105a74489cf6f9c4823911cb304da04ccc4c","sha512":"02fe15bffee76beff4d1ed5cde67bbfc1c8d8170f253d349105583e7afbdd3555cc3fe121f070fda4404d0ebec2cad7674259265a7e73b2898b27b3757f63cb5","ssdeep":"768:JIIVEbQhKkbYcQi20gDxbSY6YhibQhKkbYZOAKeMQkQI6J2j6wRTW3eORpPE5:JIIVEbQhKkbYcQi20gDxbSY6YgbQhKkn","tlshash":"6d23842158f150b7424ae1a5ea757a0e3ec1c1afea0e8d053afc1aed6fd2c50c5a734d","first_seen":"2026-09-13T12:39:59.867886Z","last_seen":"2026-09-13T12:40:33.891948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":7,"connect":20,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/dselect.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.341Z","timestamp":1789303200341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/dselect.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7MCiG0VnsGvh49pEtYb2JDCg5yTzGvJju3xpaAuf2FK8L3i%2BY0uXUHFV7jhP99H6BBeWz2qLpHi5nDj4DFwiFIVy28cSgziV%2FDw496ck7dypXBHk4AevrlPtOB6jAo%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:13 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b35-29e0\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca2efb56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10720,"size_decoded":3983,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2e6f65501c3ad292b47328ab6ff5f7a6","sha1":"c78f61677b816a7263f9b179d2acba4fd4a5c2fe","sha256":"14641702e19d6cd25012020f2f8d7ff3d334dcecffbe7291abc53a7dc046b546","sha512":"a356e26e7cfd7c92f202de90952bd7167d0a6bacff50c6a88e38ff1f09424548e5a162a8d90ba933ff81481a877dd664779a26c31b5e0e325b7b07bf7b6beb20","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gEC6b48kgsaWEE+WTZ0VNM9CY94jiv7ksB:MhOdLSwcbkg8x0VNM9Cm+yoQ","tlshash":"4522a850b32c17e910be00bfcc895de8967ca9f68c0358a2bd5881ac75d45ab13fdc5b","first_seen":"2026-05-01T20:10:36.07722Z","last_seen":"2026-09-13T12:40:33.89311Z","times_seen":31,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/3tkiiddb0026.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.345Z","timestamp":1789303200345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /3tkiiddb0026.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hjZ26%2BFY12f59v124ygfmVeKQYivhpROLfpJueBqcOvT8G3oKW10amqDTSDD%2FeqffAiSXmG992bc96VJyFLzfx5loOzNVdTsv%2BjFCKRuVmbm0xK1GuXka2c8pdcj4U%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 18:08:32 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa59520-662f4\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca2f0256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418548,"size_decoded":134236,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"32bbf0d6f62385da1966127dc1b16946","sha1":"13997b110b4df5d462ee4e10a386f33b592abab8","sha256":"5705fd7c892aaa6aa271271bf02df913ab316e1d28fd95706b150b3736b85456","sha512":"0648d9d1affeed17127c20e6d655818ce0262c40faabffd70a0e718f738a5864ea7d5d0af22e9797b2908ec54ddd92213a1b316d26736d10da5e882b9c01e559","ssdeep":"12288:ZfJWQkPYE78MHDlxcNtn/TUS5pC8tFz498E:RJ6YE7bHD78oX","tlshash":"4394c5603bd1ac58139b8b7bb32bb4e5fd5e185f3c44089bd200fd906599626faf2970","first_seen":"2026-09-13T12:39:59.891152Z","last_seen":"2026-09-13T12:40:33.894988Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/header_menu_hamburger.png","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.353Z","timestamp":1789303200353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/header_menu_hamburger.png HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Sep 2026 17:26:16 GMT\r\npriority: u=5,i\r\netag: \"6aa58b38-ec1\"\r\naccept-ranges: bytes\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B86gYBFp7L6GoQaBtLhE6lOaBqBCnQwWFPrb8l2jyItu6GeLKz05ICJESmCoQrx7Mm950U%2BVdnwjBt54B8oawqeQqmET5e89VKXO5B1rhHjEKC31uz39POJAA42Hq6Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a737ca3f0456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3777\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3777,"size_decoded":4464,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-09-13T12:40:33.895852Z","times_seen":7680,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/motiva_sans.css","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.324Z","timestamp":1789303200324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/motiva_sans.css HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlDJhPOKfixVceavXS%2FDUGPSFHnKcNA4TYeqQgdb4FhQKcPC%2BBjG2h1DaedeL84ibuuVWMSBIyzvOffLSdh9UcOQiFn34NDxPJC9wtke0K73NJswfstZBgJufKqGL3Q%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3b-7fa\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca0eed56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2042,"size_decoded":1238,"mime_type":"text/css","magic":"ASCII text","md5":"5566ef532b6535d0e81c3c410a41fefa","sha1":"d825d2918157e888ffaf4f4d039ee67c4eac7715","sha256":"576b505a364467100126c83a9ec3e2ba5f494bddd2259a58ca3cbee7d2b9240b","sha512":"0a78571c07ccc042c09e31527bb849784f6438bafa9d41dc0787683d838420085268cebcc15b6b9302bab533ef6d2d0a84165c587d6d9eff459080331da6ac71","ssdeep":"","tlshash":"a8418c00595ca53b97b00d47f3ce6e098d5f38187225c576d8a12968aff687e43b0b9b","first_seen":"2026-07-06T14:55:45.219964Z","last_seen":"2026-09-13T12:40:33.896869Z","times_seen":6,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/store_game_shared.css","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.328Z","timestamp":1789303200328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/store_game_shared.css HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OAL7RO3D8c9iRiaO9Ed8hE%2Bc2kwv81fMowrFMRdo2jgb8H5CFt04qibSsNMVUPC4n39qoIZJBiK5MCPMB%2F8qFdDqRiI1ol8F4slWPBLXXOSbtUhQibUHpKiIn74pzVA%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:21 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3d-4816\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca1ef056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18454,"size_decoded":6600,"mime_type":"text/css","magic":"ASCII text, with very long lines (3866)","md5":"877ac3be91357d1f193a5a6a4052c21c","sha1":"492484184fcb0b3f16a2256d975733dbfd261af0","sha256":"ba2cde0da0a18459e35e95b8675958a5ca708ea6326397423af4088aa2245251","sha512":"d1118c361bab1020c8717e9839fe450610694db5a64da4d4a693a7b2188c3ee0fae210494507acff01e57a725b6afee661051994919811b0b6e2907751e81377","ssdeep":"384:ObtFvljP9d3/j7SV7HWmypDra4SRDtq7d3/j7SV7H+y8ZZ:I59dKV72BpDrwtA7dKV7ey8ZZ","tlshash":"f9820a1f2122b8c9b16fd4d9ef41f6b1af0f548bac0c5f4aba95f12cd6480446732b99","first_seen":"2025-10-19T11:02:47.141725Z","last_seen":"2026-09-13T12:40:33.897808Z","times_seen":239,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/shipping.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.339Z","timestamp":1789303200339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/shipping.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ad5Ws%2B1ErYhiLMn1IBJ%2Bwp2wm%2BmOcVk%2FZuo6oAOspwR7WcXROYtTHOpClTJhRaIM2KWjLhNOuXfnFUi9TIi%2FsY35vhTG7NRbb5wpiCA%2BNZlluFwe3d3t0aEaXpSjeJM%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:21 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3d-f1a\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca2ef856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3866,"size_decoded":1667,"mime_type":"application/javascript","magic":"ASCII text","md5":"68101a352dae0184238f221b3250b8fa","sha1":"ba43eacad47807112c9403e972b9ea5bd11e8fc4","sha256":"91f15c60a42c895a4003d869927da7066a715c672ff494cb0ddf29026d4807aa","sha512":"b6efbfa6d47669d96c8dd33f7e6d98fab8b90a323fe9083cbbe464af351431352c947ac49628ec8aeac5b5ed16f4b8647f5fbed2d251d176b1ae9c94d1056e6f","ssdeep":"","tlshash":"c9813000aaf516597e2d33b1587db3175a5827e03b8f0872f07c7395ba90e25fe3a502","first_seen":"2024-12-31T17:07:45.18009Z","last_seen":"2026-09-13T12:40:33.898423Z","times_seen":49,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/fonts/MotivaSans-Medium.ttf","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.668Z","timestamp":1789303200668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/fonts/MotivaSans-Medium.ttf HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/index_files/motiva_sans.css\r\nCookie: uv=mtzsxdmd-8b56zkkb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Sep 2026 17:26:14 GMT\r\npriority: u=3,i=?0\r\netag: \"6aa58b36-1e490\"\r\naccept-ranges: bytes\r\nage: 39\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOqoAbXoDunhZNIeoQjzQl9LUHxqz4W7witwUJyahyzkROotGz%2FePOvKlHNYubnGj776oodr74ncUIxqtBI8h4dBxtIWPYl0t6xc9XimxCptdqgtvQ4ZwFflU7%2FrwcI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a737cc3f4756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 124048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124048,"size_decoded":124759,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-09-13T12:40:33.899068Z","times_seen":7151,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/main.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.342Z","timestamp":1789303200342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/main.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtGwLWOObwBPCZqlI0XsfJ8GsqTJoV0NrjOiVGBiiGHvL%2BD57uwIbsQyWCneBvxzRj%2BiZYpbZ57JbU0ViSFV4Bx6vXax0m4dqmsNGVXLiMIUeeOhXgPCC6OF%2BADD4lQ%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3b-329d\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca2efc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12957,"size_decoded":5729,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12794)","md5":"f65a4345bfd77680372a0ac7b379e5c3","sha1":"94f1669be6ee3d951621660d883e418acb5f71e9","sha256":"1867008a2a6ca1de656065c1dfce828356a5826fcdbe34a3668e2e51813d48b7","sha512":"337dc1fc57cf7a06d544d65cb0e6620d7a96a1d94cea09ae0c05a3d61d061eaa52b599efa6384588af56a0d4d4d93f9030498fa967d85f82d037165859669ec4","ssdeep":"192:+wrJG2AHVDFDlDFuDIUYokzdqSmKmqYAwuAjxHYrIJ/vbZzzGyUwta4X8LcVB3D:+wNG2AjrRwPqouAjxHYsJ/vbZzzG+Z/z","tlshash":"c042f6e8327c7e7316a136a601778510d62170632c0f5da4b38eddf668aaed16327f72","first_seen":"2026-05-05T09:25:57.965748Z","last_seen":"2026-09-13T12:40:33.900566Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/shared_responsive.css","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.334Z","timestamp":1789303200334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/shared_responsive.css HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u85mdmzOZQEgJogBhFSf%2FyToulDTNP4LxbrtzPx76knVKfbVXwDdZCILvRUuOmppbsj2INNqUtsqyVB93a%2BIYI%2FiyjmYehK7IHeiK9nV3Spu3YLX6sFmp%2BIG4n0Cq9o%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:20 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3c-52f2\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca1ef256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21234,"size_decoded":7631,"mime_type":"text/css","magic":"ASCII text, with very long lines (1673)","md5":"3ad49ffc1f18cf3d21f2640fce73f2e4","sha1":"15b0535c8bbbf0570c9d79e2314d5b508905d413","sha256":"2a91e390f847e9277717648a6e5c8e6c59b8798ebe8936c1aa9e98397cc0c29a","sha512":"032a003338607636d390c741d087588d784a0090b171ade78c4701379ee9ef3d5d909709838bb065f96cfc8300aca5a6c2e1b813414f4ec603d44e2093e0722f","ssdeep":"384:hl5qYb2mQXrUgCYezhmVJzeQj/H6TKlojylO6MK:j5qFmQXPCczeQjv6qOa","tlshash":"3d9285176e20a102b30e7259fe569f25272fc1597f0d8e5ab7b9316862c539d00a3bcf","first_seen":"2026-05-05T09:25:57.952704Z","last_seen":"2026-09-13T12:40:33.901276Z","times_seen":7,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/jquery-1.8.3.min.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.335Z","timestamp":1789303200335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/jquery-1.8.3.min.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ye3pyL22GCkVBMPWNMRUs519pW40kEzkxJlxDMNMAjw4xPaa0iEjjl9YXOK1ruZAD%2Fka8I87dwMA5mpbf6i7QwvBmqBTb0w8Q%2BHPPLJLED%2Bt7wP3SFKNUIe3AaaUYXI%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:18 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3a-16dc4\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca1ef456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93636,"size_decoded":35772,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-09-13T14:40:44.034741Z","times_seen":38351,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/shared_global.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.337Z","timestamp":1789303200337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/shared_global.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vY7lSYwrpzrbGMHbf8o%2F0hmfM8U%2BVsSG0SyN3IkpdC4OWbSvcv6aeAJws5eXgdU2XXSNwOPvDGxrWshC2UjbO7mWBLCZlB35fGqyLHh5Qk6We8KLm14v%2Fc%2FIghJGzh4%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:20 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3c-27083\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca1ef756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159875,"size_decoded":43520,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4310)","md5":"68d0635ada12f979e7d3e1c240bc6b63","sha1":"04e472e36b0b745edcedd186213642511f2674c7","sha256":"cdaae9faffe069d88c9c2b87c3cd8305c8e416515160f3ebcc8f0f1108640ea9","sha512":"4e772b19f5b403a7396a58cf1ae0b70d271fff91d8af5e5748eabafc4e5a53574fd6476f467ab42d702f714cd2314ecbea8b57c1b9b460c0dd2e7b5e590acf7d","ssdeep":"1536:0v99zRW6Q2hNJRNhjmciMQzosXmDecTVbiqD3YHI1Sp6D3QgQDrMTAQaOfXkwCMb:A/5jmciZos2DeclP7YHNgOGXRt","tlshash":"c5f318d5eb7c112a897a302ddd2f504d3a7e1832b00469297c5e94d86ae0d6e43bbf7c","first_seen":"2026-07-06T14:55:45.215407Z","last_seen":"2026-09-13T12:40:33.902972Z","times_seen":6,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/help.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.340Z","timestamp":1789303200340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/help.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKbAdiDoHTvxyYP1gMxQ2fkJvcshGf4hL0WdjWFjlATElaJhIc81zyW7ftTQ3KY5RyeSj4cA64JyKRcwpDlNyrkqFlPs3zEP7e%2BJvU4h9fAD1ayRpJFqlq6%2BDDFMiro%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:17 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b39-20f9d\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca2efa56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135069,"size_decoded":29511,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (355)","md5":"ca1ab5ddee15ff58e849884f1e5843ad","sha1":"add2797fe4c4d57758cd4fde62bbf75af0fd021f","sha256":"7708b23d607ad8d1ee6817d8be643ae012647566a6f519f293fe7d42000e6aff","sha512":"0618703a49b6a4fea4a259476ef5fc50f01e1f272a9b92dc67332c6f8cfed282b54f923a3fae6da4184dca4becf840cc776911ef1f980e02a74ce9396147f7fc","ssdeep":"3072:HTxNL5q5DBp2adtphUswEHV8NLIpuO2hNL7mYB6nwGjvjCbaIbEclurT:HTxNL5q5DBpJtphUswEHV8NLIINL7mYs","tlshash":"dfd3e6d4eb5d249e4431217ddc5e28cc393e49bb7a0609a77cc8127877e192e933af29","first_seen":"2026-07-06T14:55:45.207108Z","last_seen":"2026-09-13T12:40:33.903669Z","times_seen":6,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/header_logo.png","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.354Z","timestamp":1789303200354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/header_logo.png HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Sep 2026 17:26:16 GMT\r\npriority: u=5,i\r\netag: \"6aa58b38-2a6f\"\r\naccept-ranges: bytes\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHj%2BD6yo1Z%2FVvkG1fSYcraeDD33eXXTOkRI6HXNG47ll6nBMnztU49Z%2Flq52dJzPcLUZQ77nzJpCLSfRc2lujZtxS%2BoRMknwFpeZ6a9U5BzreyK4xizJ9PXEPmV5FYY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a737ca3f0656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10863\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10863,"size_decoded":11558,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-09-13T12:40:33.90459Z","times_seen":7646,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/images/popups/btn_arrow_down_padded.png","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.679Z","timestamp":1789303200679,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 161\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-a1\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Sun, 13 Sep 2026 12:40:00 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161,"size_decoded":464,"mime_type":"image/png","magic":"PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced","md5":"f2dae37acac6b9d5a91caf1885c2f7d0","sha1":"5f80fdde9f702a1d7589bc5faf88c14066e26c32","sha256":"93b1fbe4f6245b62bfd4c8c3347abe0fe67ed711315e59bfadaebc9873d8d9b5","sha512":"8d7ff7133ab97d81985c50fa8fd93916b42b1ce812af21bc732dcae45d59b9154fcc965857235d925c471db191dfb79c0753c70c7a4d5b0285b908e396216805","ssdeep":"","tlshash":"95c08cc1bb64ed58dad20363a596802084a30a844a53836ca9a6c875023aa01c8d1f46","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-09-13T12:40:33.905989Z","times_seen":3703,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":167,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/shared_global.css","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.327Z","timestamp":1789303200327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/shared_global.css HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uU6g8rbfMTQW%2BVeAX0ehZ6VcZiUZOAaJW%2BV3SWaHE%2FGDFVC%2FhUZCzPsJrm4FjvqOHKwp1J%2B3kQtmgue6p7AFvPYckemEbFJcqNqMsfh%2BD4TVGvhYugjONB5%2FL78uNHk%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3b-15042\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca0eef56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86082,"size_decoded":20721,"mime_type":"text/css","magic":"ASCII text, with very long lines (1819)","md5":"cde72c399d5de9c75b5c933ebf1ae0d7","sha1":"55c54326b7c5d91007a0a1f713d52f75cf15a8ba","sha256":"46786620249dfea5661828bef147cc33953b36ccfefcae438fe5e25c9fe82f05","sha512":"3f1c04ef5a7231504dd4c20d96e2f2539e6c6828e60eddff03cb8d68b73c1c2261486d33c2a1a24b8cde345b167b602ed4310f6d97a9141dbae9a8a25cd65bd6","ssdeep":"1536:+XsHeX5CzkucKN9GISh8xNrhOd8Kt/h+TcLuTcK65JLwHAfnh87C:EuhN9GMxfOdJSTcK2JLwHAfnhCC","tlshash":"9783d833a6953547732f94a9fa17ab5ba33f0187eb0e8fa9f161352cd3840d41273a49","first_seen":"2026-05-05T09:25:57.968551Z","last_seen":"2026-09-13T12:40:33.906723Z","times_seen":7,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/shared_responsive_adapter.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.344Z","timestamp":1789303200344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/shared_responsive_adapter.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rfj4iaOVI8ZVmIuk76apGAUsI%2FlXJtG2dGBZqQSTXahEEJyp7G9gXUn9h0xnYfMgyq4WPtPN2qoVu260gVdBrj%2BphLLOsqLzbNZWyZcT8D7bOEQOijqKHyAtWgKns9A%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:21 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3d-5c8f\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca2efd56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23695,"size_decoded":7566,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"15addec289a89408ca46b9b15797149e","sha1":"7004276fab8e3c4ae33f1c8919d102eed1084955","sha256":"5edcb9726fdc97f8a01d5948f7eccfb279a51de6c0e610e38d2225434b0f34b4","sha512":"e7021e8f334cb7816ecd258ff9a72ca76db8214abb96b208b58397c193a602049f07073173930e37bbed09b4c05d314a8d6318f3df0e33b55d12e10c96a766b3","ssdeep":"384:0GUcz6olWst4anMMY5erCGgxEQx/kjHBc2gdXf7h6oq:0G7z7Wst4wYkuBEosjHCNZ7A","tlshash":"f7b2b5a9f75e12768179331c6e5b348e32bd84f8710aac827d60255c3aca54e43e6f4f","first_seen":"2026-05-14T04:43:00.991826Z","last_seen":"2026-09-13T12:40:33.907789Z","times_seen":46,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.677Z","timestamp":1789303200677,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 291\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-123\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Sun, 13 Sep 2026 12:40:00 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":595,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-09-13T12:40:33.909434Z","times_seen":7613,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":163,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/help.css","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.330Z","timestamp":1789303200330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/help.css HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MRwwPK%2BLoK%2BgdWWhi%2FgI1Q8u1WxHMEHmwOaEGruiO82kyzOOQBWkMJisKmAE79lzGONN%2F0LnNn9KRkowkmtWTV25lgGIC90XCDgWv%2BOj33V5TpDG88pCikaD%2FvDNv1g%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:17 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b39-13d79\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca1ef156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81273,"size_decoded":19514,"mime_type":"text/css","magic":"ASCII text","md5":"9a23dbe1f2fc8277cf5621a55782570f","sha1":"db4e4e0396a5b589cfeaa47b368fe37ed9a1d186","sha256":"29a462e61266614f9c9db8c406b231c76f582d5709f3d07d965b4fefcf75938b","sha512":"ad8b36176e7906c549a2538fb1a4f7b54e98b71bf958266ad788fd1cdac42c56246795abf0ae199588d1f778006dacd2580c06fb36679f14b985b7e0c88295ea","ssdeep":"1536:0NoTZuRPU6US1omeWjMUcGzV3hJTxd+dMpUeV1wJMYN/iIQq48E37L6jNrK:1TZCGmeWnV6dMpUeV1wJ7C8ErLulK","tlshash":"b483616b77101c4ab12fa0a9ef95ebb6671f44d3af1e4ea6b850756cd34c1901333ac8","first_seen":"2026-03-24T23:27:54.096128Z","last_seen":"2026-09-13T12:40:33.911095Z","times_seen":11,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/tooltip.js","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.336Z","timestamp":1789303200336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/tooltip.js HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHlr3tdW%2BjWTtPdGZcVSIQbuDAXNjkbR5bJOXub3osOoT6zszGffluCrA04Jb%2B%2FzIwXHr9sfnyYpmw0xan2oZq9Hlc6wCwjaYtfYezMqVMzSSy9ggkfBGmCgiXAFf3M%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:22 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3e-44a0\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca1ef656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17568,"size_decoded":5486,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"93995e3bb315bc0695254d745e88d5e1","sha1":"206782432cbbafa347e32cd5c19775a701faef83","sha256":"39cbe8d0785370b4ebda08f844727ac3a6fc5cab10bd26cbeda5dc36ff4166d0","sha512":"b6e8c9675e186e53a54a40e45ee78f6025b0ddc3f067f6f0bef67fef3ce5f30cce2d0be18b7457e05ff397ef8c301ab5bb07fe53fcf61e11f65de9f872f361d0","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubK:h3ug4R4svlBEJpocOFJ2eu+i9","tlshash":"ec826591f73d20ae407ab3be896d2388b33e40b65161f8757d7886743a4e4970392fe4","first_seen":"2026-02-18T02:21:57.511284Z","last_seen":"2026-09-13T12:40:33.912514Z","times_seen":601,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/images/blue_body_repeat.jpg?v=2","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.664Z","timestamp":1789303200664,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /public/images/blue_body_repeat.jpg?v=2 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 65743\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-100cf\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 13 Sep 2026 12:40:01 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65743,"size_decoded":66011,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x690, components 3","md5":"105f079801573f86f1eb00e5a5859b5b","sha1":"a25da185557ecc0eb30943f902723b415bba4728","sha256":"b258176e6b291343c18679962ab8658108451a22f12a5aecab106501d8bc091e","sha512":"fb3574ade953ac8dc2dbd866d035327b73e1ad47528a878bf6b8c328679f44d7cb513a57e74a2e0489a5b42fa1c8992e9ee73ec54f7f19047f2e863be5fbc8f7","ssdeep":"1536:rNLzMwRMBrmzHC4IO0cYFmL+76ELuC+ZYJ+pGXN:JLzVm6dIO0tmqoZC+G9","tlshash":"eb5302cbb65c7693f2ac857ee6cae599ee317f84b11441eb4385882f04210ad5e17cd4","first_seen":"2023-05-21T17:27:57Z","last_seen":"2026-09-13T12:40:33.913423Z","times_seen":74,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":160,"receive":13,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/favicon.ico","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:01.037Z","timestamp":1789303201037,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/x-icon\r\nCache-Control: public,max-age=86400\r\nExpires: Sat, 12 Sep 2026 23:31:27 GMT\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nContent-Length: 1406\r\nDate: Sun, 13 Sep 2026 12:40:01 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1406,"size_decoded":1747,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"2690ced7d66cf8b34658922e9625f65e","sha1":"57477c2180cc7b6b9e3064a46cf8da4ad7555540","sha256":"0c6516e22335e762e68bb63cc3f6eee7455fc226d0fc00c62ef13fc93fa16971","sha512":"c95a83a53c9fd1da6388b8c63e6b8434670f1a0c9c9db2cc775efc127899536095ec8290ec251575d1a355cc8c3a2c9786e719ae7e51d992de9e73e080d92aab","ssdeep":"","tlshash":"d42186016521db79d3f88d72fcc397508b255044c1f7ae867c9974945c88024f49e330","first_seen":"2023-04-10T19:13:33Z","last_seen":"2026-09-13T12:40:33.914283Z","times_seen":59,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/fonts/MotivaSans-Regular.ttf","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.667Z","timestamp":1789303200667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/fonts/MotivaSans-Regular.ttf HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/index_files/motiva_sans.css\r\nCookie: uv=mtzsxdmd-8b56zkkb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Sep 2026 17:26:14 GMT\r\npriority: u=3,i=?0\r\netag: \"6aa58b36-1df3c\"\r\naccept-ranges: bytes\r\nage: 39\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wuIbgYA09ArU8C%2FrlNMNamuen9F4xomH%2FBilb8I0CQmO6c1BfLD6iarVHsuA2NTMBiXrxp3Sjq6fZCBWs4LdzcCn5966J7MdMDe%2Bjr6jfgOnhmoHEuNWQyE7he52q8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a737cc2f4556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122684,"size_decoded":123397,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-09-13T12:40:33.914932Z","times_seen":7393,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/buttons.css","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.326Z","timestamp":1789303200326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/buttons.css HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0CPgYXrF%2Fzt4V8cF9vst4LRzJ%2BqtOOn54TinoRu4HhSLcFxHAuYh62H%2FPO6Q%2FzloOhGFHodZsU5MesAtgt3FUGNApKyaZAtpvyZY2%2B%2BM0VQ7Oh76CWS2XvqUnuCwcDA%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:13 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b35-8e79\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca0eee56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36473,"size_decoded":5055,"mime_type":"text/css","magic":"ASCII text","md5":"25881b90a0ce0119a61231ea5688f035","sha1":"a5c1b63eea8d5e5e12c5a5141deedf0316b7aaec","sha256":"d1c259d645161358bcdcc7d07c4144cda32cbfa675bc084b84b9ba25323532ec","sha512":"d71e223b3071a4515f7f633e7cd087d833c3a1a40ba75c98ea9f599fc3ec1b3a1c8461105680e6c31b1cbe0bcef7fa61af7b581b41ce409ced2140764e4a7ac0","ssdeep":"192:X9MA5hhzxcbeYatuUxpC2hSGz0usVWnGsws9cbpWG0WASsaZsMtAmYabUoByYagD:l5/z6bJaBhSdbiabUo7aZaKj6vvZfGU","tlshash":"1cf2ce99b38c70753237e1e065175fe86a7a109e88670f9efab5b2bc13da0ec1535813","first_seen":"2025-05-26T14:57:53.038233Z","last_seen":"2026-09-13T12:40:33.915521Z","times_seen":39,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/logo_steam.svg","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.355Z","timestamp":1789303200355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/logo_steam.svg HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7MzEdLxzNlxhCImyt640w1htMXPHRY61Eck8yRUIsZEIx8EzOliBb10MZNXlYS%2Fq4nCBIC2ydj1lve%2BG7ILDw82l%2FGD4Jr9%2FvPTaLJSmSDnLErdqbzotxgOP4UiQPs%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 17:26:18 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa58b3a-e3e\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a737ca3f0856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3646,"size_decoded":2458,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-09-13T12:40:33.916143Z","times_seen":3010,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/images/blue_body_top.jpg?v=2","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.662Z","timestamp":1789303200662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /public/images/blue_body_top.jpg?v=2 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 50887\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-c6c7\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 13 Sep 2026 12:40:00 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50887,"size_decoded":51154,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=690, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=2038], baseline, precision 8, 1600x690, components 3","md5":"9b4b2ebbb01be5c4cfe1fcbdd9da0ef0","sha1":"8d17a27b2268930b4ec86c56f9cd0c73ce18ff7c","sha256":"aeacbf69f083c220da60b8994c08cf8cd1505a62a0df5a7c0a9aa4f258bab1e7","sha512":"0a15b6e53c85e193baa7618ab0ff50afe764e613b9d02eada43da6ba23efb7a845e2a39561f935ec5247d4fbcadad1390be91ad10ef913e502ba68879ced53d2","ssdeep":"1536:lqA5Kl4nn9bogS73BTeo7xk884jtUUit4cs114:44nn9bRSzBeU84uL4w","tlshash":"0b336e26fe1c1fd1c5c978331900edb39a354f684b932a96fd7c320a7766d86982439b","first_seen":"2023-05-21T17:27:57Z","last_seen":"2026-09-13T12:40:33.916784Z","times_seen":74,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":162,"receive":11,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id71841.info/index_files/fonts/MotivaSans-Light.ttf","fqdn":"id71841.info","domain":"id71841.info","tld":"info"},"ip":{"addr":"104.21.79.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://id71841.info/","date":"2026-09-13T12:40:00.665Z","timestamp":1789303200665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id71841.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 15:09:34 GMT","end":"Fri, 11 Dec 2026 15:09:33 GMT"},"fingerprint":{"sha1":"92:B4:8D:3A:08:3C:FA:11:59:E1:82:0D:C1:51:83:8F:E7:8A:20:7C","sha256":"72:1B:1D:71:EB:46:25:9A:49:1A:01:C5:C3:CB:32:48:D7:00:D3:FA:9C:9A:9A:06:25:8F:74:52:02:A7:63:14"}}},"request":{"raw":"GET /index_files/fonts/MotivaSans-Light.ttf HTTP/1.1\r\nHost: id71841.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id71841.info/index_files/motiva_sans.css\r\nCookie: uv=mtzsxdmd-8b56zkkb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:40:00 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Sep 2026 17:26:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6aa58b35-1df24\"\r\naccept-ranges: bytes\r\nage: 39\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxjaHKkRiqeSlLXF797ok860l7V8n%2B8JJPr3%2F8SKtvP2lJ%2Bwi6Q%2Fmp0NgNg4oMkv6%2ForcSTONWZKuNtSxUQaIBt%2BbuNW8%2FvtJFVlWZh2dj7brRSDr2C%2BADXlKRZVH%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a737cc2f4456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122660,"size_decoded":123385,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSans-","md5":"d45f521dba72b19a4096691a165b1990","sha1":"2a08728fbb9229acccbf907efdf4091f9b9a232f","sha256":"6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc","sha512":"9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c","ssdeep":"3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh","tlshash":"70c32a46f712eb4adc554e3d6162a3d5b348f9f53b2f830ba2856e55fc8f0c90e46288","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-09-13T12:40:33.917328Z","times_seen":4118,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"id71841.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}