{"report_id":"42f35e1c-114a-4a8d-a96d-f7516a5761cd","version":6,"status":"done","tags":[],"date":"2024-01-28T02:37:56Z","url":{"schema":"http","addr":"vae67afk.cc/invite/i=3788","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"104.21.37.31","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vae67afk.cc/enter/register","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"title":"t33n leak 5-17 age"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T01:41:28Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"vae67afk.cc","ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-01-26","domain_rank":0,"first_seen":"2024-01-27 00:50:27","last_seen":"2024-01-27 00:50:27","alert_count":11,"request_count":11,"received_data":1318433,"sent_data":5690,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.discordapp.com","ip":{"addr":"162.159.130.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-02-26","domain_rank":2474,"first_seen":"2015-08-24 15:06:21","last_seen":"2024-01-27 18:12:48","alert_count":0,"request_count":2,"received_data":4380184,"sent_data":1074,"comment":"","tags":null,"fingerprints":null},{"fqdn":"b.yzcdn.cn","ip":{"addr":"185.23.181.26","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Germany","country_code":"DE"},"domain_registered":"2014-12-08","domain_rank":425969,"first_seen":"2015-07-08 11:30:49","last_seen":"2024-01-27 22:56:50","alert_count":0,"request_count":1,"received_data":9750,"sent_data":425,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vae67afk.cc/js/chunk-vendors.ea790e22.js","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fee178f809d1b2a829099a8bb91c56c","sha1":"178b6322fdc40c08fcbda0c096c668855ad49b51","sha256":"c3580c9951b9554639c1404a246b3f27f818a99240c728f04cb964cd9e50b73d","sha512":"965985bffe1e9a2254888c7eadb7e896a0e78581ac728ca8c0d38fb673ceb302205573a9bff914acd7c1cb7bc6da32ed4cb5409dbf6e3eecc98fb359c28e8cdc","ssdeep":"6144:SCUOs30tR08Fg3iLLbQdqyWwEZwYLGX4yZI9Go/IudP0Pz+CNdQKKbqmM9wszi1I:SmsEtR08F7eRE2+UFPS3KKMhsgAPFDy9","tlshash":"c8151a89b281b075439770a4806f110ab2376d5ca40ad198f67df4e9af7ca8d6137f3e","size":949174,"data":"","first_seen":"2023-03-07T01:35:40Z","last_seen":"2024-08-21T09:33:17.508651Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/js/app.50caf3e5.js","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe917f1fe23eaecf672039712b4ef10d","sha1":"a5af5870a3786b0d112fd879c40486a289a60584","sha256":"742777fb5254d14fe90556cfeb6d37659f76e89157642aaec8654bb057f220a6","sha512":"37431718f1eff6a190d0e760145e989f2ac76b8e9079cd614c5d8b8d10a0790d7d011d17d58580f74fd79265a4ae381d748712204a4e2c3efd8fc32b7dbfae0c","ssdeep":"1536:bTQP10jy7xJfmEww0xYnTlJ9TqhsTPsOT50TiTTW/fko:bTObVJfww8YnT1T9T3T50TiTTkv","tlshash":"83f3fab7de45e50c0e15450739b911c2b3b33f59da6740c6f3b4ea982ae18b4362a78f","size":170602,"data":"","first_seen":"2024-01-27T01:27:27Z","last_seen":"2024-08-20T10:59:03.272534Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vae67afk.cc/invite","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:32.153Z","timestamp":1706409452153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"POST /invite HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 19\r\nOrigin: https://vae67afk.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/invite/i=3788\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:31 GMT\r\ncontent-length: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=8GMpD%2F48WXYTlb1HoIS6W1bz688EIxzEGMFhVjmKmryb8iGABQhNt4vULK47YWjTwNvACUpzZJD2A1CbeFQFl2EOuXAmyPwkpl07mEVmHwiNUrHJCQdF%2FJRpwYMtdQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84c5da9c9fc5568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T11:26:47.687319Z","times_seen":18033980,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.discordapp.com/attachments/1200501483867750433/1200501558056599642/dfsvwe8.mp4","fqdn":"cdn.discordapp.com","domain":"discordapp.com","tld":"com"},"ip":{"addr":"162.159.130.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-01-28T02:37:32.801363737Z","timestamp":1706409452801,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /attachments/1200501483867750433/1200501558056599642/dfsvwe8.mp4 HTTP/1.1\r\nHost: cdn.discordapp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 28 Jan 2024 02:37:31 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2188371\r\ncontent-range: bytes 0-2188370/2188371\r\ncf-ray: 84c5da9d9da9b511-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 104180\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: attachment; filename=dfsvwe8.mp4\r\netag: \"b245d562b3ce3f72143d344217d3553a\"\r\nexpires: Mon, 27 Jan 2025 02:37:31 GMT\r\nlast-modified: Fri, 26 Jan 2024 18:04:35 GMT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1706292275773747\r\nx-goog-hash: crc32c=2f/wiQ==, md5=skXVYrPOP3IUPTRCF9NVOg==\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: STANDARD\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2188371\r\nx-guploader-uploadid: ABPtcPrYEowcIfuc73T2UzNJBlaaeWX1wWRM-uAuxC2eBNnB9fJsGDxiGxX7f9iHAO5O3YL5KZLFiKnj2g\r\nx-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0AGSCjtdEXRngDDnpnlt2xhpihfdrlwF1tgH1n4Cos%2BPwyhLKRqayCI0ejQMhLpq2Y8p8c1E4iBkIU19wBlAq%2B%2FkCEFHDUyxd6WqfSAJ627reCvmqekCb1bUpE%2By9nRU5RiNyw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __cf_bm=viRbesaiReE0zk2MM8yMWsE3VZUIAjtbDo5LtAA0zWw-1706409451-1-AfmUBIs3Q+rkdx7TqjynX9vr1Ia7ol7Z9Hjc78P3MFe+iz79nGqDjVV5xWfFD8I6If30BmGKa/+6UDeEHwixsJs=; path=/; expires=Sun, 28-Jan-24 03:07:31 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None\n_cfuvid=bfCEN7YfEA97OdIJHytUUMpr4BZLfs7p_sQPr5jaTic-1706409451152-0-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2188371,"size_decoded":2188371,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"b245d562b3ce3f72143d344217d3553a","sha1":"520dfecc0c9654d2a495ad4cc9b520290b15743e","sha256":"2636582d5c2a2230bf9e5e7470205d3d057e6f3a0bd2d19fe3286fee238aa832","sha512":"e882e3d1b5e3c9601b894a32b5c1dc0808ecf3cb831e3a2eefeba253bcb22114cdced15ca2c7296e54417620f9c81fb5380ebf9decb592f78e38b782c91690c5","ssdeep":"49152:veCmeNIYzgLLGdfDADONPzaNwvOtsq1mV:mCmUNwIbADKmNvKq1O","tlshash":"dba5235f0cd21121ffadfaacd808c942e0c06153e887db9b71ed46564bbe15a0b9f936","first_seen":"2023-11-11T21:01:11Z","last_seen":"2024-08-20T19:56:50.996174Z","times_seen":25,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-01-28T02:37:32.801599056Z","timestamp":1706409452801,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://vae67afk.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sr8VUZVOfa5ELDLiYgOibQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 28 Jan 2024 02:37:31 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: EYtBImfX3s5NGqGrTP9BF5SLNEo=\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=amdkzNqkzfkyUimE3zxW%2Bfj2rwxTNnV%2Br5dPsy9wsNtRxH4b3E1vo%2FlWEQiO3lIe1oMD1zZyL48aDplhaSaOMiA06%2FC7HxLKHbwbSd1maOdZSJr6273jrFq7aqdkGw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 84c5da9d6f010b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T11:26:47.687319Z","times_seen":18033980,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/img/icons/apple-touch-icon-152x152.png","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:32.590Z","timestamp":1706409452590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/invite/i=3788\r\nCookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4046\r\nlast-modified: Fri, 26 Jan 2024 20:34:30 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 2282\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=nJtpIPoWCL65n9gapqFvYqOQNpUGtxPfUg8voo%2FDsajsEHWTMlxZfN7ugUrVdR85UDsf%2BDHrSBwRhmcJFd%2BAzL9lXBLYMRXcYBzz%2B5W%2Bez1kyZxuA42bS3e97v1FYg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84c5da9f492f568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4046,"size_decoded":4046,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced","md5":"1a034e64d80905128113e5272a5ab95e","sha1":"92328e60f63d690f33cd4961b9934a539dc29b82","sha256":"4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135","sha512":"663dccaa2273e1b381f202d9a47c850565289c7e663c511c3936e5609de51fcb61e1d088660ea9befce2609dbcd3ad6f815d043a87631b31fc596d0b14dfce86","ssdeep":"","tlshash":"e1816eddfa9cc6df85131d9b016f6185f83da0565efc3d06a4bb8d0a6822a601b017d5","first_seen":"2023-04-13T00:26:43Z","last_seen":"2026-08-17T07:12:29.22636Z","times_seen":1676,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b.yzcdn.cn/vant/icon-demo-1126.png","fqdn":"b.yzcdn.cn","domain":"yzcdn.cn","tld":"cn"},"ip":{"addr":"185.23.181.26","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:32.219Z","timestamp":1706409452219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.yzcdn.cn","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Thu, 09 Nov 2023 00:00:00 GMT","end":"Mon, 09 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B","sha256":"8F:82:6E:D5:B3:3D:E4:86:5D:DF:2C:53:25:66:11:24:E4:90:98:24:8E:7F:82:F6:93:07:A1:AD:ED:96:2D:C4"}}},"request":{"raw":"GET /vant/icon-demo-1126.png HTTP/1.1\r\nHost: b.yzcdn.cn\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 8886\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=2592000\r\ncontent-disposition: inline; filename=\"icon-demo-1126.png\"; filename*=utf-8''icon-demo-1126.png\r\ncontent-md5: +HxG80alVIIkzL4La9dd9Q==\r\ncontent-transfer-encoding: binary\r\netag: \"Fo6Li9S6PmtshVfZSnJgYf3WJJL9\"\r\nlast-modified: Mon, 26 Nov 2018 11:08:05 GMT\r\nx-reqid: YyIAAAASg9geDiAX\r\nx-svr: IO\r\nx-qiniu-zone: 0\r\nx-log: X-Log\r\nx-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC197_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC26_DE-Frankfurt-Frankfurt-7-cache-2\r\nx-cache: HIT from BC26_DE-Frankfurt-Frankfurt-7-cache-2(baishan)\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8886,"size_decoded":8886,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f87c46f346a5548224ccbe0b6bd75df5","sha1":"8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd","sha256":"b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370","sha512":"4852e453726de2f2c4481aaa661df24d111ce49e8f57e1fd8d23bd7db93ff78561a31d894ff6148ddbdd7ef9d99dafe0d7371b567aa7112a770e18ed17ab41dc","ssdeep":"192:T1ejBaEeCInIUI6F3BGA7sHrx6c+IYJY3mgE039sK/oeNo/vc7ga/:T1eFF+I+3A0U7E+9sKpkvcd/","tlshash":"5402aec508505081342287a9d818707d2a9aa626da7e0787ea6c3650ceb09f6f85bff0","first_seen":"2023-04-30T23:44:28Z","last_seen":"2026-08-12T17:51:56.951573Z","times_seen":1195,"resource_available":false,"data":null}},"time_used":1761,"timings":{"blocked":868,"dns":791,"connect":24,"send":0,"wait":24,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/js/app.50caf3e5.js","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:31.750Z","timestamp":1706409451750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /js/app.50caf3e5.js HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/invite/i=3788\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 26 Jan 2024 20:34:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=kXSm8YYHc1MvfMVUcBCPK5op7hE%2F67X6%2FCQzdVqJOVrW8%2BLc50E5khqsZpKVrdI5P7N%2Bx7jQFV86TjUovjhuYj6%2FQbi1ldWtMnEsm1DIIcNZxvufL%2B6th2AcCgvGdw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84c5da9a0e6d568e-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":170602,"size_decoded":170602,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T11:26:47.687319Z","times_seen":18033980,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/js/chunk-vendors.ea790e22.js","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:31.748Z","timestamp":1706409451748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /js/chunk-vendors.ea790e22.js HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/invite/i=3788\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 26 Jan 2024 20:34:59 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FmcXDe30yW9cYsZIaNqn699GnmP%2FiUDPv%2BPLYEEHynJn2ko%2FUcywg6zRTbD3smdv%2B0uY62ptk8vOUPZ6HFaXqaefmVvUn%2FngrAsi5679nelyFD8BhRaUBjFs3m%2BUyw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84c5da9a0e6b568e-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":949174,"size_decoded":949174,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T11:26:47.687319Z","times_seen":18033980,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/css/chunk-vendors.c57533e1.css","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:31.751Z","timestamp":1706409451751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /css/chunk-vendors.c57533e1.css HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/invite/i=3788\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 26 Jan 2024 20:34:27 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 2282\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2B6SFjetJ6DF%2B18xqoyaDM024YFfOuRaFK5WDBrIV%2Fqc%2FfZdnl21ctHy8RzKag8%2B1asSz0pNgrr9%2Foy2KNgU%2B%2B0tajcQ3dDbMDRxGiTCKj0hAJC6F6gyxFM0ffZYpCA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84c5da9a0e6f568e-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":156544,"size_decoded":156544,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ebfffebc1f62c3be51082e6595a0a005","sha1":"e278fbd6fd48150b3f366b50ed388983d934978c","sha256":"f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32","sha512":"ec1ffe3ba3da9f1db52f5bee312f94d09389d7f518234ca14712e2a7533f640264307382d3b2816e5c258b77581f6a4fc856895095067b83f5c4cd3c9d57219d","ssdeep":"1536:PeN5J+jOkiHcZiNEBVcZH5NHMja4drYEXfh1tRdsVAlWE:PgeVc5HMjajUfjXvlWE","tlshash":"ece3e92b8ac0235cb217ce615fc4a7d8c228c571e5920ef9f21376298fcbb86159675b","first_seen":"2023-04-05T23:34:09Z","last_seen":"2024-08-21T09:33:17.50638Z","times_seen":1144,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/css/app.0624664d.css","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:31.753Z","timestamp":1706409451753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /css/app.0624664d.css HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/invite/i=3788\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 26 Jan 2024 20:34:25 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 2282\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=PTVHul1zg1wgt1Sg9RPmJ0GLIfBeO2u01rI0yQpoSJI0%2BsmQKUBJfdEk%2BV28PrAQdZC2gqmeiaxUKDDsbC0IaPXl5WvW3SecRbTWhJUC7QSXyKlANd7J0XzhVjozRA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84c5da9a0e70568e-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14103,"size_decoded":14103,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14103), with no line terminators","md5":"a57d72b6eee0f952031e5be14fc64128","sha1":"f8a5c16a63a614ef2032adcd7851d16b6a6a1f41","sha256":"34e039fd05de2bacc30921c98ce1224501e22cd9c3da7512f9ef90f925a603dd","sha512":"9d0f016ca667e899ca51ac255e775bb907b809457ff904084b90326797aa6f3b69353ba5ee0a63f0d26c071fc4fdca37b12daa53243a7acfd5b79211110c30c7","ssdeep":"384:qhp1KuK12UHmzSIa8K0fiV48TtirO2oInHJ00r0/inBiET8qkTikI8kCyj3TmQ4t:qhp1KuK12UHmOIa8K0fiV48TtirO2XnW","tlshash":"5b52862bba4d6024fa7bc9a63ca5eb8c9314ff43e1475a606a4356314ccb2d7356c7c8","first_seen":"2024-01-27T01:27:28Z","last_seen":"2024-08-20T10:59:03.261383Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"vae67afk.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:32.267Z","timestamp":1706409452267,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://vae67afk.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sr8VUZVOfa5ELDLiYgOibQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 28 Jan 2024 02:37:31 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: EYtBImfX3s5NGqGrTP9BF5SLNEo=\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=amdkzNqkzfkyUimE3zxW%2Bfj2rwxTNnV%2Br5dPsy9wsNtRxH4b3E1vo%2FlWEQiO3lIe1oMD1zZyL48aDplhaSaOMiA06%2FC7HxLKHbwbSd1maOdZSJr6273jrFq7aqdkGw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 84c5da9d6f010b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T11:26:47.687319Z","times_seen":18033980,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":12,"connect":12,"send":0,"wait":197,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/getlog","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:32.270Z","timestamp":1706409452270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /getlog HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/enter/register\r\nCookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=cLealJ%2Bh%2BJDfYB3sM7Vb4HvJ8JiJ0Sds2LvCOul%2BScZIBkA%2BiplqIeIvCkbfSiOwQpNiJ2qEj6ih39E2KeWs8sBIZCsxUn6XNIBIyZaB3Y50aqMQ5aInrVM1g1xCYA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84c5da9d4822568e-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11797,"size_decoded":11797,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"555eefb97024258237322b4695d8594a","sha1":"06d1a107ff313f90596528788b5be163062775c7","sha256":"3deb449180d9eb0268d9b0ed33be05809f018625f46cc1acf820c36b1be533b0","sha512":"345858be0f8a4d97a976d33cd1e48f8d9fc1c96c2725690829937555807ab492e8a0f73cb1a6294b9b7af35ca38d32dc77548e95f38f655a62feffae0011b4e8","ssdeep":"96:KnvXC2kNB/wcwlw/f6ysk2J0RI/zSZAtgyQCh5SR0+ZUJgu7bX6/ezYfM:qnkf4kpqmZAtKSIqhd","tlshash":"6932dfba1bf5747c11332894ad713e879cce6076cde04a91efcb2e4e20554b22d9b762","first_seen":"2024-08-20T10:51:05.143401Z","last_seen":"2024-08-20T10:51:05.143401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.discordapp.com/attachments/1200501483867750433/1200501558056599642/dfsvwe8.mp4","fqdn":"cdn.discordapp.com","domain":"discordapp.com","tld":"com"},"ip":{"addr":"162.159.130.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:32.305Z","timestamp":1706409452305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"discordapp.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 20 Oct 2023 00:00:00 GMT","end":"Sat, 19 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39","sha256":"AE:AD:8A:65:51:06:63:11:23:96:B7:DA:16:50:23:0B:76:2A:B6:E5:33:E1:33:DA:84:FA:9D:D0:8B:E6:56:63"}}},"request":{"raw":"GET /attachments/1200501483867750433/1200501558056599642/dfsvwe8.mp4 HTTP/1.1\r\nHost: cdn.discordapp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 28 Jan 2024 02:37:31 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2188371\r\ncontent-range: bytes 0-2188370/2188371\r\ncf-ray: 84c5da9d9da9b511-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 104180\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: attachment; filename=dfsvwe8.mp4\r\netag: \"b245d562b3ce3f72143d344217d3553a\"\r\nexpires: Mon, 27 Jan 2025 02:37:31 GMT\r\nlast-modified: Fri, 26 Jan 2024 18:04:35 GMT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1706292275773747\r\nx-goog-hash: crc32c=2f/wiQ==, md5=skXVYrPOP3IUPTRCF9NVOg==\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: STANDARD\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2188371\r\nx-guploader-uploadid: ABPtcPrYEowcIfuc73T2UzNJBlaaeWX1wWRM-uAuxC2eBNnB9fJsGDxiGxX7f9iHAO5O3YL5KZLFiKnj2g\r\nx-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0AGSCjtdEXRngDDnpnlt2xhpihfdrlwF1tgH1n4Cos%2BPwyhLKRqayCI0ejQMhLpq2Y8p8c1E4iBkIU19wBlAq%2B%2FkCEFHDUyxd6WqfSAJ627reCvmqekCb1bUpE%2By9nRU5RiNyw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: __cf_bm=viRbesaiReE0zk2MM8yMWsE3VZUIAjtbDo5LtAA0zWw-1706409451-1-AfmUBIs3Q+rkdx7TqjynX9vr1Ia7ol7Z9Hjc78P3MFe+iz79nGqDjVV5xWfFD8I6If30BmGKa/+6UDeEHwixsJs=; path=/; expires=Sun, 28-Jan-24 03:07:31 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None\n_cfuvid=bfCEN7YfEA97OdIJHytUUMpr4BZLfs7p_sQPr5jaTic-1706409451152-0-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":2188371,"size_decoded":2188371,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T11:26:47.687319Z","times_seen":18033980,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":17,"receive":148,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/invite/i=3788","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-01-28T02:37:31.358Z","timestamp":1706409451358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /invite/i=3788 HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=NxorX7x%2BpE1c4eIEPxYWs%2FzK5wFsguLBFbdvumHMNZyECmCfTE6NSPGTGHsy6BVXMSOZAnyp6A9s9y0%2F%2FoqkcCJM5TOb%2FOpdNwZtekDrMlOGXDhLJgMSRGONvqFOjQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 84c5da97bc40569d-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2704,"size_decoded":2704,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2870), with no line terminators","md5":"4989889d1a190db11e2252f59bf5abdb","sha1":"ad8129b522d78dbdff1359a80b988d6bc2718919","sha256":"47759406da134ba53b321877d160acfd4d80e3ee33414b2da7acaf8dd65fcebc","sha512":"f2d471b32ce3dc26151954bfa380f7df91085149e0db2a6c5ccc9f77d54a082e09041b6bc3537b840379373d1138633f3b59c941c19cfe30cd9cad0e5d1f69be","ssdeep":"","tlshash":"5751206f8938e14f2700e937a826703d4876f85e8c50c89535c9a2ee5cf4fe68563bb1","first_seen":"2024-01-27T01:27:28Z","last_seen":"2024-08-20T10:59:03.26191Z","times_seen":6,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":20,"dns":1,"connect":2,"send":0,"wait":185,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vae67afk.cc/img/icons/favicon.svg","fqdn":"vae67afk.cc","domain":"vae67afk.cc","tld":"cc"},"ip":{"addr":"172.67.203.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vae67afk.cc/invite/i=3788","date":"2024-01-28T02:37:32.592Z","timestamp":1706409452592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vae67afk.cc","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 26 Jan 2024 19:12:34 GMT","end":"Thu, 25 Apr 2024 19:12:33 GMT"},"fingerprint":{"sha1":"90:77:B3:9D:BA:DC:04:CB:F2:9F:D0:63:C0:F8:5F:0D:1C:8E:52:E0","sha256":"46:53:F5:BA:86:28:57:69:9E:4A:33:CC:34:8F:1D:31:25:A1:5E:9A:EB:B3:12:04:44:3A:FF:23:FB:22:9D:7E"}}},"request":{"raw":"GET /img/icons/favicon.svg HTTP/1.1\r\nHost: vae67afk.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vae67afk.cc/invite/i=3788\r\nCookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Jan 2024 02:37:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 27 Jan 2024 18:11:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FaLHQCAMpDj5WIfFkh%2FKS4p76kXKRahgA5p6II9JOHXICf4S1mh3OMeN%2B%2FTfT8bhHKe8%2FJBkJ%2FvabqDaHuxyJxb1%2BP1Jy%2FDU81Z4e%2BLmgMqtxubCTIWYTfkzcewEEg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 84c5da9f4931568e-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2704,"size_decoded":2704,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2870), with no line terminators","md5":"4989889d1a190db11e2252f59bf5abdb","sha1":"ad8129b522d78dbdff1359a80b988d6bc2718919","sha256":"47759406da134ba53b321877d160acfd4d80e3ee33414b2da7acaf8dd65fcebc","sha512":"f2d471b32ce3dc26151954bfa380f7df91085149e0db2a6c5ccc9f77d54a082e09041b6bc3537b840379373d1138633f3b59c941c19cfe30cd9cad0e5d1f69be","ssdeep":"","tlshash":"5751206f8938e14f2700e937a826703d4876f85e8c50c89535c9a2ee5cf4fe68563bb1","first_seen":"2024-01-27T01:27:28Z","last_seen":"2024-08-20T10:59:03.26191Z","times_seen":6,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-01-28","alert":"Sinkholed","trigger":"vae67afk.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}