{"report_id":"3ef0598e-61b9-4e86-a370-d414bd90ed49","version":6,"status":"done","tags":[],"date":"2026-02-13T21:07:51Z","url":{"schema":"https","addr":"bagworkofsol.net/","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"104.21.41.193","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bagworkofsol.net/","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"title":"$BAGWORK - EXPERIMENTAL DROPS","dom":{"size":13640,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7697)","md5":"1a2ec6459c9af24a754053926fc3fc0a","sha1":"288c8645e8844abbbe25374864b078ff8831aeab","sha256":"961d2fac0e21a88dea252c13a78ee8d5d63b776dbd54fea3b6cb19adb5137f7e","sha512":"57c63e8f274ecebec06836118765ee71f6cbf8874664b1ba13c1d2aabad148cd947efb6960f0ad80509535463ca0eff1b4b1fc851562020c1932906938ef6d22","ssdeep":"192:0BpygM63wXi7auXwUA3TCrO2+CzEJNYJ5ABdIx6paEj1kRXyCWNADdu:ypg513TC444dIx6MEZk7u","tlshash":"a25252208ae00015546386506ad2ab5f3163cb2fd91f4ea8baec55dacfc7cd7973335a","dom_hash":"domhashe1b64100a50ec3c85131c027f8cabd8d","first_seen":"2026-02-13T21:07:53.613995Z","last_seen":"2026-02-13T21:07:53.613995Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bagworkofsol.net/","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"104.21.41.193","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T21:07:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bagworkofsol.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-25","domain_rank":0,"first_seen":"2026-02-13T15:26:22.930754Z","last_seen":"2026-02-13T15:26:22.930754Z","alert_count":9,"request_count":9,"received_data":1267757,"sent_data":4160,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bagworkofsol.net/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fcordova-plugin-geolocation.esm.js\u0026t=29516947","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-02T04:01:32.943888Z","times_seen":2647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cc9fbf143351b4b5b253ebc29c8baf64","sha1":"fb55c93cde268cf84396be56c556a01de7400a22","sha256":"6ff4358dcb840f0832d6fae99daf90505690ec73546ef7f8983c161f82ce8487","sha512":"ba832d3405047d5aef69c403e0efcc5b0a9e648a3087d11f59af245165f571a6111bcfc70058bf44fab54e07e68c782621432e5a3fc4730472643c146c44ec1d","ssdeep":"6144:3kzkdkzk3J49ugOHJYtk4Ro2gSy2z4ffxdfvn7M7Wt+E58YEu:3+W+a49uhT4y7iE+EPr","tlshash":"f5c42ec5ca733bb8c351875d4726f6c4f728ae9587bda82fb89ce291b84c01604f62d1","size":552980,"data":"","first_seen":"2025-11-16T02:46:34.242227Z","last_seen":"2026-02-18T14:10:35.633679Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/fp-ts.default.min.js","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aed677cc3b8dddae2366743fd47484a","sha1":"9dab287d73dde20f550628ed44acf4a83717b835","sha256":"d3ddc2dc6b7332b2fc1a612a13c20483361c92a1346531515da8fa041c94d934","sha512":"989487db69d7badf757ea66d4684888159f867a8c6f7965e8e5b2f4a7def7afa77e6ba734f7a439872a2d8b6b46284a378070b0c10d2b9ee94455db474b577eb","ssdeep":"6144:MG8vjG8v5ohuEKb0lOsP4siaaYR6f5RjfRVLvY7MhY6hmYw4:fjoohuRY6Z+iY69Z","tlshash":"b8c43dc6ca733bb8c251875d4726f5c8f768ae954bbca81fb98ce285b84c41604f63d1","size":565048,"data":"","first_seen":"2025-11-16T02:46:34.239997Z","last_seen":"2026-02-18T14:10:35.631759Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bagworkofsol.net/","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T21:07:29.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:30 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 25 Nov 2025 14:29:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xbqvvxq2ioOHj1G1%2FDCM1J4QTOGxL7mtSAna31ydsTi5W5E3vCp1PQ9uxA52LKKq6PH%2Bp2qRIr3%2BJDXNZS0wpCIHeDHPXPIIvub%2BpPQ3VMo%3D\"}]}\r\nage: 1081\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd74bb0bfdbb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13496,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7697), with CRLF line terminators","md5":"97cd1d66c9ffe8523198d309c10f1f71","sha1":"bb88c323e136eff322c3e489fc9fc02392028af0","sha256":"5c12e2e12ba3084e3bbefe68378236417b2a1d39b695f0ab2e60bff1589cdd36","sha512":"dbcf1abea25709863e528fcc1be5c8cf43bde500ee509deea03424b8dbc884c96be1694f3a3fb9787d5b42beb5d6a04bd965c257e6f545e8b52ec5de5f2dde28","ssdeep":"192:yTXttM63wXi7auXwUA3TCrO2+CzEJNYJ5ABdIx6sNYztFf3tGXr:uXQ513TC444dIx6oYBE","tlshash":"935262208ac01015547386505ad29b5eb063c72fda1b4ea8baec66dbcfd3c979733317","first_seen":"2026-02-13T21:07:53.617445Z","last_seen":"2026-02-13T21:07:53.617445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":62,"dns":27,"connect":8,"send":0,"wait":23,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/fp-ts.default.min.js","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bagworkofsol.net/","date":"2026-02-13T21:07:30.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"GET /fp-ts.default.min.js HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bagworkofsol.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 25 Nov 2025 14:29:10 GMT\r\netag: W/\"6925bd36-89f38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2D3n8xgLsZ%2F%2BgWgSi5KZq5D2PEDpIkuNod3jfRb%2BQ%2FnVvD8afp6S%2FgBq%2FszfgI41eFa%2BOBO3NIBBN2KdwYZtNm9lKzc%2FJGFoEqBtbXU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd74bb2298782d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":565048,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65287)","md5":"3aed677cc3b8dddae2366743fd47484a","sha1":"9dab287d73dde20f550628ed44acf4a83717b835","sha256":"d3ddc2dc6b7332b2fc1a612a13c20483361c92a1346531515da8fa041c94d934","sha512":"989487db69d7badf757ea66d4684888159f867a8c6f7965e8e5b2f4a7def7afa77e6ba734f7a439872a2d8b6b46284a378070b0c10d2b9ee94455db474b577eb","ssdeep":"6144:MG8vjG8v5ohuEKb0lOsP4siaaYR6f5RjfRVLvY7MhY6hmYw4:fjoohuRY6Z+iY69Z","tlshash":"b8c43dc6ca733bb8c251875d4726f5c8f768ae954bbca81fb98ce285b84c41604f63d1","first_seen":"2025-11-16T02:46:34.239997Z","last_seen":"2026-02-18T14:10:35.631759Z","times_seen":14,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/5e5f669472a20ec4.css","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bagworkofsol.net/","date":"2026-02-13T21:07:30.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"GET /5e5f669472a20ec4.css HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bagworkofsol.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 25 Nov 2025 14:29:10 GMT\r\netag: W/\"6925bd36-1faf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=II0kSDLrfO%2FVRhCr649SeO6MehGUtNty%2BeiydxGj72Yi4RA7Rs5Fmws2AXL8uVAgTC%2FOye0DsMx94llFfOAhPxuDKuBcG21I1yONfNLL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd74bb2298482d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5843)","md5":"8a33fdd413396af5d6ef90930327ef35","sha1":"e8b31f9164099567afdea6e2923c83977b2bf3bf","sha256":"227f536857aa053cd12d84b22de95f1832f3cca1b80bf7597c90478fb9b65b40","sha512":"6dcb2193c8c4973f6eca26ba08b5f2f31c216aa509753e581d754ff9a03d151dfc2bbe7190c6a425b52c2f27715dae4d492c9934f8f4b8d53b4a32be237215b5","ssdeep":"96:QZpBrH4l6pHH429fqzfGYlGSvdYoXDG6nOeieuOXR7IFNf0gJhG7O9O+JwIdLUIH:QNYlEYiqzOHuYRbXw+elS1ecHJ","tlshash":"0ef1eb26d101d47e9d63dce232ce7e22563c3457caf02a94ef660a158fc78b933a1b19","first_seen":"2025-11-26T00:22:08.981187Z","last_seen":"2026-02-13T21:07:53.621734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/css2.css","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bagworkofsol.net/","date":"2026-02-13T21:07:30.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bagworkofsol.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 25 Nov 2025 14:29:10 GMT\r\netag: W/\"6925bd36-6ba\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYPAyBKYL%2F2DmPnsj90yzQeB3cjlpUTQPzMm5tFYA3rxrPy4HISZkB2mIzXP3HbIAK4YNDTMmR%2BmjUJ0mmQYyjtr58%2BvoIR%2F9ksV1wfi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd74bb2298682d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1722,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"198f6a899d03d5a3d744a4eb7ef2d31f","sha1":"076cd55828071e5864b0624c4532c58b6c847589","sha256":"f393525fdbe888b5ff272cea4edf5a895d1f96d9093586f759c1158f15930a26","sha512":"e63e1ee2558b766b5cb71530138a99ebc94cc3212578b5e7d6fe69e7fbc42b3dd245afc6b6ece1dcd5130100f797fd58ee5a5f710eb54e4125678692a71323fb","ssdeep":"","tlshash":"34318c60086a2540eb4b1cd63bcf3e365a9d62663015ca242ffd146cac9fd356269b8d","first_seen":"2025-11-26T00:22:08.983227Z","last_seen":"2026-02-13T21:07:53.624546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/secureproxy?e=ping_proxy","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bagworkofsol.net/","date":"2026-02-13T21:07:30.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bagworkofsol.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 13 Feb 2026 21:07:30 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzGt%2FrN%2BsGMV98qBfIMEYx1nKz%2B4G3wgIiaSmhSgO6HqbQa1hScyh2e8DNS9pVjFrjNFljJBkpmkCPHaS7NWeLHP2SgnmIc1WlgqVGCF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cd74bb4cb5982d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-01T09:09:08.987257Z","times_seen":8977,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bagworkofsol.net/","date":"2026-02-13T21:07:30.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"GET /TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bagworkofsol.net/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12672\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 25 Nov 2025 14:29:10 GMT\r\netag: \"6925bd36-3180\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64z1ciFAyNva%2Fhyo1TKOopTOZNxg23ujnZManXjcLCzJ9EDX4DKKSq1jfBxPW%2FvWY%2FwpGLhkNAWOm3SKbOwI60vWMWFdCSBWp6TWfiQp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd74bb4eb6a82d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12672, version 1.0","md5":"665f37b2d0e8235c8c351a8277eee8dd","sha1":"f691ee17ef07ec6870a74ffe8da9bf97cc7effbb","sha256":"aae665c75af89ea7cb7d8ccc8b0911ea72267442ebcd84f6e3efa041ad3b3c16","sha512":"1795a5343e91129ce9baa63cfdbba3a9253f296149ddb0f0a92f5fbffa2ba53c15b186b5d140ddc4ddf2ea1f33abaed5b11e3599b4a9d65d033324f60917cc5e","ssdeep":"384:YkT9mVAqlCkVuRV39ZnFfPTorP+HovZnK3Jr1j:UVnlCkVuRZ3FPWZnSnj","tlshash":"4642d0eb17ef074cc6b5f1e7b01dc8ca9196377817ba6889850610c67a60cee63c24b7","first_seen":"2025-09-11T17:05:43.86731Z","last_seen":"2026-08-02T04:55:19.307278Z","times_seen":3858,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net//secureproxy?s=%2Fjmpd%2F","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bagworkofsol.net/","date":"2026-02-13T21:07:31.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bagworkofsol.net/\r\ncontent-type: application/json\r\nContent-Length: 1754\r\nOrigin: https://bagworkofsol.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1754,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"db-Ru7LBo8qir5CQO3C8W3xTB+6c+8\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771016911820\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 21:07:32\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 39f1717c07189b54a9305beaa91f4dd3\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2GRDbWe6a5rz%2FOIM2VKbSVik2DQ0qiZ%2FaENxPe6To59hOyzqTxxkXgoo3sIqZBq4ktdP9%2F4%2ByO3JTsTxW7ur%2BmZ2HqMVsV66S1w3XtD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd74bba784482d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c9e486df57fe9f09e7cbdc9d07bba95","sha1":"46eecb068f2a8abe4240edc2f16df14c1fba73ef","sha256":"237fe2ad7a126f7e9d6f224ef1b15a4279acc05d4fb6e7efad3a42336b5d7c97","sha512":"ef744dd9056875663cbb8cb4838fbe1dda8d9a78ac1255fab9c7f6b84010c679094874db28b2c05afe8529f5ac4f9d494f19f0e1f94844f0eb32031fb9f7d439","ssdeep":"","tlshash":"ced02384a8ac03801b101eb88c0088fd3d514706b7cc8420c0635dd2e030d49b2c478d","first_seen":"2026-02-13T21:07:53.630312Z","last_seen":"2026-02-13T21:07:53.630312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fcordova-plugin-geolocation.esm.js\u0026t=29516947","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bagworkofsol.net/","date":"2026-02-13T21:07:30.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fcordova-plugin-geolocation.esm.js\u0026t=29516947 HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bagworkofsol.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:31 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=cordova-plugin-geolocation.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 21:07:31\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 8905f0bf8b79d3cdca96300f5520d9cf\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUqvFdbZiygExgiK4aFREASyQPr1ZGELxh%2BZPavdZoz2eLikeHMn8d%2BreCN%2BtrzgHYAUXAWF53x4ajytE9aBbuDTV1y9jPD%2F2SsABF0a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd74bb64c7782d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-02T04:01:32.943888Z","times_seen":2647,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":413,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagworkofsol.net/favicon.svg","fqdn":"bagworkofsol.net","domain":"bagworkofsol.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagworkofsol.net/","date":"2026-02-13T21:07:30.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagworkofsol.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 17:15:41 GMT","end":"Thu, 23 Apr 2026 18:11:44 GMT"},"fingerprint":{"sha1":"4B:F6:A7:6C:BE:16:40:1B:00:FA:14:FC:C7:4E:56:45:ED:78:30:DB","sha256":"1B:B4:53:93:BF:3E:AB:11:C8:5D:80:5C:9B:35:03:52:71:03:E8:F9:7B:A8:29:77:60:80:B8:DC:C7:4F:4D:75"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: bagworkofsol.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bagworkofsol.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:07:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 25 Nov 2025 14:29:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Nr7FHvfrQFodgvFnsvRiv1IChq4u89z0QkgNYCdbhH2%2F0%2FWk1IHyTMiDBXmsAImCwTB8vGOAiwIg2r88VwlQEb4viA7YD9V%2FFuaW0Vy\"}]}\r\netag: W/\"6925bd36-118\"\r\ncontent-encoding: br\r\ncf-ray: 9cd74bb63c5882d9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9f765edee033cb5fd542408fd347b4b","sha1":"c49dcc3f5910ed3b99f503386e26ca1968e02985","sha256":"f71c00d98f33347e6edf6bf33ddee0e7a07d3cb3b682dd5de32ef3e1d4eccdc7","sha512":"a282292565ba8bfc8eaa6e8eb9ddf4550f7e04a51b879a46745f9c461f60252fc655b898de4d486f3501b39ab383b3e344e41dcef70c780afb8a42f30f3fb00d","ssdeep":"","tlshash":"26d02b65d085572fc20c4e25330575aa248ef5cc6ed68424f998563ce0c7cb7ada139c","first_seen":"2025-11-26T00:22:08.984131Z","last_seen":"2026-02-13T21:07:53.634293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bagworkofsol.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}