{"report_id":"45cad031-200c-4472-8e77-c67e3a4b7b64","version":6,"status":"done","tags":[],"date":"2026-01-11T12:54:09Z","url":{"schema":"http","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"title":"copyocean7的個人資料 - Discuz! Board - Powered by Discuz!","dom":{"size":12272,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (724)","md5":"e60e18073f07c74d1bf25ba3e933a3a0","sha1":"38fa05984474ea0e22ff48b4a365edf039090f66","sha256":"008d00cfb86f628deaa4a3bb50bee44deb3312dd9e3c6230b3416c0933e1a427","sha512":"0ad0601ce13d2182b4a5561ae9cff81ed4a9100e9e7b50f6cb2639a93abb951d3cd35ef143a933734f628edfc3f722b0ddc21373bef27b508cfd38824ec34262","ssdeep":"192:4KyAVsFiFzbCP35meVw+bFzM/PUbeKVW7WFWyFMjN9RfuzviRR5QKR+Ep/M:1VsFcbomqvliPMVW7WFWEGwC5XR+E5M","tlshash":"b642b5118989c8770673c9e4b6b5bf2d70d11279eb112844b6f89bad97c8fdb880217f","dom_hash":"domhash86055ff42e0ce944ee02f64499b75259","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T12:54:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.hker2uk.com","ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-21","domain_rank":0,"first_seen":"2023-06-05T05:18:07Z","last_seen":"2025-07-19T22:15:37.825779Z","alert_count":25,"request_count":25,"received_data":261674,"sent_data":16389,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Discuz! X:3.4","description":"Discuz! X is an internet forum software written in PHP and supports MySQL and PostgreSQL databases.","website":"https://www.discuz.net","common_platform_enumeration":"","icon":"Discuz X.png","categories":["Message boards"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4b704049bb449560a7e16155b3d01d53","sha1":"c63ce43685021734249cbe2c8ed829fb3c521f10","sha256":"e225f77ed9a896d53048ea75bfeab57f08c128e083e1f849763de437d18e04bd","sha512":"453317e909047a6f89e1cbc056a7d7222390ae0069637d18e7295a46d25306aea033f16934dd975b94eb8a1fd91ca1f00d14769f7407d9cde6c3274b3d79ffbc","ssdeep":"","tlshash":"e970000002802000b8200088b008002832aa02030a88802080a0030000083803ac8200","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.905981Z","times_seen":1529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9b8e84ec31eced42c47a27947dfbabc8","sha1":"0589ff5bc7fc05b709c6d8a122990199ae38c8a3","sha256":"be18c62887de403f8303d82a815b8696b0acfb3cdc579e0714325cb03ba82f4d","sha512":"ff34b5f18234119afb382f2180bfedd35ca76fb32e5346d873e0d8394fde8d874269ecc9302149400a21a6fc8aaf750c97974c2dde1e3026a8a3f283d0376324","ssdeep":"","tlshash":"b370000283008000a000a888e0ac0008aa2202030a00002000000a0000008002aa8080","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.891053Z","times_seen":1527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7819c0d19b10856f8e2a55bb92f684a9","sha1":"7bea260aaa363acbed63896b5f1c10ccdaea6c08","sha256":"7492accd96d886675fb5f161543965a8cd07f1539e0960b7d603e72cefc8ce37","sha512":"0cc08a4a3e5e2e2c1cc5d6c9012dfcc145b36799c501ece9dba54c776c882b9346da34a6db29ffafa18a63be2e3b04573ba1287e9f345dda3cc83ecf7758b5de","ssdeep":"","tlshash":"7970000c0a208020a000208e8028000aea2020832a0000800002820000800002e20200","size":20,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.820635Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"901bf525bbedb8df1fada3e35e14b0bd","sha1":"7fa6b05c770a1d1ab71b42c0b0ccb273234896b3","sha256":"81590784ac8c4d2d56e3bd06e668ad49a0f1b783c57a47a799bb30efb6f8855c","sha512":"18fe0fd499d7db524186164c768cf07f558f8793aeae7f022631e684285a1b158fe46485624175eddd686ec42ba01f6c7301994b8c0b365aea9772244d71894e","ssdeep":"","tlshash":"2e70002b82002200b0022880e20c082822a088230800000000200a000200a002a80080","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.851766Z","times_seen":1530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d8b2bccdd8396b9f97e22f2e3fc13a49","sha1":"dcf73be0165354ac59dbfd5c7c3f9739fed624d4","sha256":"c3d8dd48ba3c697b4480c600905bd008a73d756f4ca7f32165ee1ef674ef7b80","sha512":"a18222e090d652aeaae2ac96c001a3b8744086cf720121996f0e527c772cb5047dc75800c0bb0b00b2119bfe2714e04b8d8ed2790bbacc4fead0b29d8091a06f","ssdeep":"","tlshash":"9670002083200000e000228080280088a22000230800a82032008a00c0000a82a28000","size":18,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.818403Z","times_seen":1526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0bbea63f8e43936a2da15fb0e24b24ac","sha1":"d711331a8c8b74a037e8758baf88df16baa69236","sha256":"2f41ab97ac43c4382461cc607ed39f109747088e7d47ffccc873372581545076","sha512":"7e397d4614391095fa43b1481b00f9d4169b5336ae4f592913a51145a0a84c7a5b6a37fc9b68b5ae49d80e55ed3e88921922357a64a3dd1a19bb0d2d284fb40a","ssdeep":"","tlshash":"af70000002808020a0800080c008000a2222000308000823b0228b0800220aa2a20000","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.858308Z","times_seen":1526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/js/logging.js?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92ddc79dff91e0a9be13c94f3122aae9","sha1":"6f39ccdef7985993ff146788a514acd383f0f037","sha256":"88d5cf56033b00c9fb060189cb763a8a0566c888ed2bc57d6f78cd655e47f8fa","sha512":"c8d4ce9c22f890d5a7cfe2c860172d04a2fbd59c01137308d8f53f4556b8b40df3616031761899f9c9ee0a066a371ad9932d5c2d3699bb89887e1f43f30e1e13","ssdeep":"","tlshash":"4ef00244376b161e4b8033e0007b8e45ff787630d015a46ce4103ac13e39916d463631","size":603,"data":"","first_seen":"2023-03-07T13:14:49Z","last_seen":"2026-04-01T11:10:55.025184Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6f9986d73d5b9fff73fb73375ccaa01","sha1":"a64575a676198bb13b18f647fc5564b50734ee32","sha256":"4535bb284d3571451afb0c7a830c8f76d6c4b3597af4566749c92fe5b7552aeb","sha512":"dcbe16f3775166733b7cb17700035f730f4c6ac7602616cf114d865c3968d43b5d2f984db2a0cc7e1d5802882985ffa153606372ab05829a40095fc18ec9c4fd","ssdeep":"","tlshash":"d4f00e29b97292400a22e2203dad30be9585e9f51f801828a809307c10c4b10e85461f","size":494,"data":"","first_seen":"2026-01-11T12:54:14.174684Z","last_seen":"2026-01-11T12:54:14.174684Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62d713867ed732fb17698098c55599e2","sha1":"5aeb8b96e316ce665747ba40a94fc0e9ed62c46c","sha256":"d2d6ccc27a39c8802af9557fb2ced0d6390811b98622abf7d0f652adf9288b07","sha512":"76a016450aac940f3985d8a0392646f5eb6b1af801e2ab426002b986a672c6d2aa7ab13b61c9d4624f177c42ac64199423dda83ef5d0bc6caabbb61c3f86f7bf","ssdeep":"","tlshash":"428000a0b000c02ca00b0282008c0aacb8ca00b0cb0a08808eb02282a88222308e23ea","size":34,"data":"","first_seen":"2023-03-07T13:14:49Z","last_seen":"2026-04-03T17:31:48.818951Z","times_seen":371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"27d58fc853760c4c5959ea4c18102e05","sha1":"a0b1e5bac4f9ffab125e2a72ec32515ecfe980a7","sha256":"2689585176589381b3c09d32ba2ae5ac4e9420773ef1de98ba8606d037aface4","sha512":"56ce2e09b837040f5c37c8c6470990a0e93f7372611a397000e3ee7449c73d30485f3ec41bcdac1a175ac027d3f7ac47452f3cacd5fd6f7d32088a015010f2c7","ssdeep":"","tlshash":"fc600000c3300000f00300ccc00cc03c33300c030c000cc00000030000c003c3f300c0","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.850886Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"175fc6d1243653309b8957927a2e37a7","sha1":"8b51b4200048cf402a2181010bb08e31952d1a2a","sha256":"5c19b3d1c997e69b9a78c434e733f38e6a5d86a5862833015c022ca8eff8d9cb","sha512":"f9ac317e6687c024633c64ca9320348e1de48d0d1924d1fc876333c792aa7ac9e138bf081e97be25eae29d698a1773490376e1f5e4e5213770936d69fba34475","ssdeep":"","tlshash":"4580040500344573430cd545c141c40c4345154d4c105547c3540407050031110c750d","size":35,"data":"","first_seen":"2023-03-07T13:20:42Z","last_seen":"2026-04-01T11:10:55.085893Z","times_seen":553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/js/home.js?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8aa7cab442a0abd1633bfd404cc9586b","sha1":"ab36e94ce9b4186ec471db0979b2309470d13bc3","sha256":"0d6f7cfd13e88f22990eedcc6d91941a30e82eb486c445dcf4bb693a76ae9dd2","sha512":"8870e15a43ddc6563d7970c5220f2aba16e56508479c7b367af9b1655bdf3a2885d714719ac12eaf4f90e365f5c636c0135565104fb195e3c3778ed6aef948a0","ssdeep":"768:SHLG0FnmP4DGwFr34BQpl4UIaslWHKD4Ok8Sa53FmjO3lTotP1yHaFPeaHmMmKRC:IG0pmP4DGwFcBQpl4UIasl+KD4OkFy3T","tlshash":"58e2a39a322e164dc3d77761a47f0909ad38d2355646d6bcfc68d8e460f0e28b3639bc","size":32687,"data":"","first_seen":"2024-08-20T08:57:17.685568Z","last_seen":"2026-01-11T12:54:14.126807Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa632d4e4286509fa66a4b8c5f31c7c9","sha1":"ac5dc261a02bcaf0aebd7eec66c29bf240c5481a","sha256":"a7f46285c5dfdbbf3eb2cac88e562aef4939467c1bf6d2d72718b47b2afce60c","sha512":"9ad64babb8d8147e982aa8633479daed8b155e9145924b4ab7138670a3f813950f70918199a47e1fec2eb0480692e1e063a2922bec4d2858b311f986e02d4558","ssdeep":"","tlshash":"9e70000003300f00fc0300c0f00c000c33fcc0030c0000c000000f0c0000c0c3fc00c0","size":20,"data":"","first_seen":"2023-03-07T13:20:42Z","last_seen":"2026-04-03T17:31:48.921122Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8c1994b5f132a6d00db7043ca0fb5d34","sha1":"08ee2e698c7187ef69e45861abaa2e986a0e2656","sha256":"6baecf50ed14279e5b1e6f3e8472f26fb323e339b3f5e29349ccbf33a1b77c5b","sha512":"913ca4e12a3adf418096a5be985499ac7aabbbe4a69e1292bfa97d88b445c37611bf321657435357b56dc186b57797e168b0590a57b80ed0e4f41014ec4091f5","ssdeep":"","tlshash":"0970000002000008b0000880a8080008aa3020030ac000822020220080e00202a08220","size":19,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.909465Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d23e36e1d5e020c7c17c6fb59cfb24b0","sha1":"49032b9bc25166cdaec5fdf13d0400cdce27ea93","sha256":"0b4008fb3d12c5cbf5985b3aa73bb2a6c5bc608febebafac52cdc5998a648e6c","sha512":"4285d743ffe803454202916de8bee14caae82a1815a4af1aab80971bb05f9559856d5147cc01edbb27ddf4cba7549b72a966e40c5a09d649fbc15047ebc94450","ssdeep":"","tlshash":"8a60000c03003c00f000ccccc00c000c333000330c00003000000f00f30030c3f00000","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.824137Z","times_seen":1407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5f4ea336ed2a6f72617654d5e6986508","sha1":"7bee1abbf241c69851b3db9d55cdf61a5340118c","sha256":"130ddd31e00b4c5d4cc86c978a97535571fa74c22067a836e993f480b76d8c33","sha512":"dee14c99aacbd372c3a84b1068602331bb6616d78d495bc9f94047dba34fc6f57c9b51b2bfccdb76adbce8bffc46787cabc597eafb54d988f45f00d7c3bc69e7","ssdeep":"","tlshash":"c160000003000030f0000cccc00c000c33300c030c0000c030000333c0000c03f00303","size":15,"data":"","first_seen":"2023-03-07T01:16:54Z","last_seen":"2026-04-03T17:31:48.827587Z","times_seen":1521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/js/common.js?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"665b8bdff29038fa95b4ce6551d292f6","sha1":"54af9f4bd724a7eaca9710917deb032f00434874","sha256":"1844aaf57fca7f81c1c9f7b42a12ce3a5a05041551a5b2998076bf689711efee","sha512":"341007dc4c4840fc10e9d78e071fe2fc4b30754f4f09f83758e0e39c1a6752580184b9f16bdd5c420828a0c986960dc8502ca81b5b55f54ecfb2271a1fb44e99","ssdeep":"1536:RwF+GXNKKmy0HwP4Q4YWArpWqPGyc4Ieb1uAIP09S/0x4ARmn/S7TL32fd:pGJ1zrpWqPdc7+1PIgdRV3E","tlshash":"9063e864320d613d82d63326863e9944ec7cd8365307d4f8f868d8d864b0e7aa7a6dfd","size":71988,"data":"","first_seen":"2024-08-19T17:46:57.451611Z","last_seen":"2026-01-11T12:54:14.163983Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d806485a916ad0b0803fa0778ed95ce7","sha1":"b5171b006bf2da4d9d27f5339e953e29ca837f5a","sha256":"4ab2c0b0c1f22808c0c54bb7a6b59b6dcdeeffe6619c7f491041cf62b8d5d97c","sha512":"40fd0ccba22b4814ed97133b4882f69aba4b79c8dee024ea3ebb23a24f75b52053b22f198a1f9bea6daa801bf4788fd2cd0d42cf075c90acbf952fcefe46018b","ssdeep":"","tlshash":"6480003008a0208b803a082a02ca82aa8c8a282088202222cf080a002830ca0c8c002c","size":30,"data":"","first_seen":"2023-03-07T12:08:39Z","last_seen":"2026-04-03T17:31:48.823142Z","times_seen":782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2871c7c5088039983e5b6dfad6f613ae","sha1":"f6c25ac11b1aaad7838c60f5c456e7c2ebd56e1a","sha256":"e60c7913e2bba4ed614ff80191dd3e384d4897ac0fc83faecf3776abf84adcb1","sha512":"bf1a439ecefad80dbeca89b922aafbccb88315e2da0a4b56117e78328cc1655724abebb259c5f1f2faf7b42b5f0495ec1c39a214f6403677138c65fb0e819182","ssdeep":"","tlshash":"06a01122300020a08238a0f88a0a8b2e8000a80200a02a00880f88e22ea80ba2b0e808","size":76,"data":"","first_seen":"2023-03-07T12:08:39Z","last_seen":"2026-04-03T17:29:04.789621Z","times_seen":833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.hker2uk.com/static/js/home.js?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/js/home.js?rhz HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Mar 2023 04:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64192e7a-7faf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peYc%2BI4H%2BnaaCfrcuQqxKXLLZ2AyLUT1fEpgZGNI2sc0zur6VLtTFhxK8%2FJdf2gDFzXUfrSZIKn1idJHq1mTEECoeJ%2F4cvpwoQJgFw5XDw%3D%3D\"}]}\r\ncf-ray: 9bc48f1ce8f1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32687,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (368), with CRLF line terminators","md5":"8aa7cab442a0abd1633bfd404cc9586b","sha1":"ab36e94ce9b4186ec471db0979b2309470d13bc3","sha256":"0d6f7cfd13e88f22990eedcc6d91941a30e82eb486c445dcf4bb693a76ae9dd2","sha512":"8870e15a43ddc6563d7970c5220f2aba16e56508479c7b367af9b1655bdf3a2885d714719ac12eaf4f90e365f5c636c0135565104fb195e3c3778ed6aef948a0","ssdeep":"768:SHLG0FnmP4DGwFr34BQpl4UIaslWHKD4Ok8Sa53FmjO3lTotP1yHaFPeaHmMmKRC:IG0pmP4DGwFcBQpl4UIasl+KD4OkFy3T","tlshash":"58e2a39a322e164dc3d77761a47f0909ad38d2355646d6bcfc68d8e460f0e28b3639bc","first_seen":"2024-08-20T08:57:17.685568Z","last_seen":"2026-01-11T12:54:14.126807Z","times_seen":7,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/logo.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/logo.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 4425\r\nlast-modified: Tue, 21 Mar 2023 04:16:43 GMT\r\npriority: u=4,i=?0\r\netag: \"64192fab-1149\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppIs8btVY8fx2%2BTnrx%2BdGQ7eRuxsuEQ9edIDJRRBwqF2Rv42ANiCYkLtKhSL4edGpP9b8jXEKSaOqDRgYSASlGPzuKQknEFhF5qW1BPNig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1ce8f2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 66, 8-bit colormap, non-interlaced","md5":"82537d47ada3b2649894d2c56d45a1b7","sha1":"3a9fdafafe67113a290574dc611dcfd3472e8477","sha256":"2f9f2d655e2b3f94d09deaf16557664248af961160a567dad0581f57c639fc18","sha512":"77f2bed07a40cef56475019559af8c59855220891f984ee581c042cfba7058ff44f377011d4aec7d6149362f2df45b8f8092b88389be33dd54c8424a4825717c","ssdeep":"96:IgPHRc/yIrWgJXobf5oyUq/wlSHt3O82g2OgPaD5P2Ru:ZXI6gJX0PjAAt3d2g5oaiu","tlshash":"7e914dcc695266d0dad945e42e91013f96e02d5139d4b7da346ffce32438386011bbfa","first_seen":"2023-05-10T12:55:42Z","last_seen":"2026-03-07T09:57:37.883273Z","times_seen":51,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/background.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/background.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1166\r\nlast-modified: Tue, 21 Mar 2023 04:16:37 GMT\r\npriority: u=4,i=?0\r\netag: \"64192fa5-48e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1t73e6rNhlIY3IcBTCkjRuP7nH4GbgcQYqXyZ%2FqCUzX%2Ft9%2FYUF7MODK7ji3rbdOL7WhbOLb77mesaj6n0IoUAGuWwubR%2F947gNFiJKOpcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1ef96ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 81, 8-bit colormap, non-interlaced","md5":"5c884d51205f2f58a0e12eb91d6fb665","sha1":"42be54df261896116149f3a27132c19b3c57c9fc","sha256":"ff49564e79c4029241afef0a3e56ffe6c09f07f945a6b0cdf78b84b839c2eb7d","sha512":"97dfe70ab9e833706f35c4877e47ff6be4e1ce81e6e924d219c69c196a59ab8d03f4b9f6c70ea0c171b19d2546e214f95360bd2e6831fe8ef9becb94fde5c30b","ssdeep":"","tlshash":"b521678ef910f84353c5d6d918d6546b856a4880dad0ed7bfccac8030e212f6a00f4c7","first_seen":"2023-05-09T04:38:37Z","last_seen":"2026-03-21T12:43:27.606689Z","times_seen":146,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/switch_width.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/switch_width.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1107\r\nlast-modified: Tue, 21 Mar 2023 04:16:13 GMT\r\npriority: u=4,i=?0\r\netag: \"64192f8d-453\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JD7wcwej6Ro8LI%2FPOXxI49xF4W0sZGynVPKySmpburRfIFUnF5aYL%2Bd1ii%2Bmge5gNZkCto1vf1dUcmjMPb5Sa3iwx972%2FMYrYzfReoOWVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f1970c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 72, 8-bit colormap, interlaced","md5":"e223f548c6b313e1f52f66965d155aac","sha1":"12e2f80efc55bc3908a0a5876fab8bc1729b18dd","sha256":"73fec5cb3da0bd129260e4ef665f24988e8b4b8cc206af64c4258c9adf02731b","sha512":"009fc147526d6da95812db1409c34c8c45cfff76fac74b9f955727a990800b26f047c79d4f32b8091019ec5a78f3565761766bfea81ba6ae2a307eb9b67adf50","ssdeep":"","tlshash":"e21175c01ff65f6c86e22fd20f1a044cc4b1dd583d0231a518e9b66323b5a90d384ea3","first_seen":"2023-05-05T20:14:48Z","last_seen":"2026-03-07T23:41:03.95786Z","times_seen":305,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/px.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/px.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 210\r\nlast-modified: Tue, 21 Mar 2023 04:16:28 GMT\r\npriority: u=4,i=?0\r\netag: \"64192f9c-d2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pGUqR6d%2B5%2BwZ6yieShiaLz%2BO8Ow9em0%2BQwM2%2FCl9i6HYShID7kICmaYNWObv9FBXNDVi2Ail3KS0ZR4OMt0%2FQTDDpJ5sjHTWFpHrXMjXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f2974c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 1, 1-bit colormap, non-interlaced","md5":"1120da8344d0a52265635f08820867f4","sha1":"964f9165b23b866cce7dc930566160615b05bbe5","sha256":"e11970020edea5be0994cf33d189346011dc92c901e946303ba6422b028bc231","sha512":"bd32df3ef75cc8df46064c0946b4eaeddaaf06a040d1a69afc3dae83de3642103675f8a9b80e326e7e711880a3f93e96e8bf3f2ec0b8ee83612e37b513e67fff","ssdeep":"","tlshash":"11d022c1a7a88c9ba67aa793c1c20091f51b138281055d1a4c88c5201aa98d8e7a4637","first_seen":"2023-05-04T01:00:46Z","last_seen":"2026-04-02T08:22:15.528092Z","times_seen":468,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/scrolltop.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/scrolltop.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1383\r\nlast-modified: Tue, 21 Mar 2023 04:16:37 GMT\r\npriority: u=4,i=?0\r\netag: \"64192fa5-567\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAkKjIxyafZYWyUBJTOB0H%2BBYf7n6%2FBdeSnasFN8ZpFQYDDpdMfmEI8O5x4z4RjIxFDiWc9KS1yZ4yVTZsvpUaQmEG%2FgOounwAxBPYeR8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f397ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1383,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 120, 8-bit colormap, interlaced","md5":"e619a381b11184c28e12b6c199d075d7","sha1":"934e3ace2c81b51f5c804143c2e1a124a6a9b77d","sha256":"c9a11fc108c17c57cc8196558ec7a9eba3833a0a7023717251bf2a0ed25244fb","sha512":"b1b40923539109a1281bb562c599dc1857fdd2fa7f56eddb778a88a51cfe438e7898d9d4d4adc8a8f5ce0cccd24a0f5bb78281d57bcca72e9b639639c85054e3","ssdeep":"","tlshash":"fb21dbf11f28d924061548514d76bad4b56f9c5c0d2f52918b46b4cc267b4509bb09c6","first_seen":"2023-05-04T01:00:46Z","last_seen":"2026-03-31T06:34:26.111452Z","times_seen":436,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=space\u0026uid=5248004","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T12:53:47.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /home.php?mod=space\u0026uid=5248004 HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: aWvh_2132_saltkey=MltaYHyK; expires=Tue, 10-Feb-2026 12:53:47 GMT; Max-Age=2592000; path=/; secure; HttpOnly\naWvh_2132_lastvisit=1768132427; expires=Tue, 10-Feb-2026 12:53:47 GMT; Max-Age=2592000; path=/; secure\naWvh_2132_sid=FoSOtx; expires=Mon, 12-Jan-2026 12:53:47 GMT; Max-Age=86400; path=/; secure\naWvh_2132_lastact=1768136027%09home.php%09space; expires=Mon, 12-Jan-2026 12:53:47 GMT; Max-Age=86400; path=/; secure\naWvh_2132_home_diymode=1; path=/; secure\naWvh_2132_sid=FoSOtx; expires=Mon, 12-Jan-2026 12:53:47 GMT; Max-Age=86400; path=/; secure\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZNViHA2eDHMcxIsdf%2BTDMwWUchTmSxkAQfOqDPbaOCp9y8ljTQq9w8DKlFYSJyStnPU866tNyBCO%2B3qys2iStFJaM4YuQbas3qEMBM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bc48f19abf9569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Discuz! X:3.4","description":"Discuz! X is an internet forum software written in PHP and supports MySQL and PostgreSQL databases.","website":"https://www.discuz.net","common_platform_enumeration":"","icon":"Discuz X.png","categories":["Message boards"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12279,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (730), with CRLF, LF line terminators","md5":"13c9e76f68b2ae53346c42c3b76f6b84","sha1":"b446628b50ee0c820d8f111f97fd3cde48f9e7a6","sha256":"5b895527e20ead39a5bf1b4927edb8f1b8740300e0e341c17c8e39e6b82f4619","sha512":"b8a53331cde4367b3a11419d0452ff9951ade50025f80d44f1aea973298b33fe992719b8278aaf7efbcfc8dd646cdbfc650e50753f4a4a6eac152cc42e178c46","ssdeep":"192:SIvVyvOJFz7uz9dPeFzCMUpdzWLW9WyFQEkN9hfuzV+EJQemKQVuR+EEh2:SImOL8PoCMidzWLW9WENkQVRJQemK8ux","tlshash":"0342952199aacc770333c5f4b0b6bb6de0d15276eb021844b5f52aab97c4f9a484317f","first_seen":"2026-01-11T12:54:14.142269Z","last_seen":"2026-01-11T12:54:14.142269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":286,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/data/cache/style_1_home_space.css?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /data/cache/style_1_home_space.css?rhz HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Sep 2024 10:30:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"66f537e2-6895\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYRTiuQtJGeX72YN3TlZ3MQ4GBqWCwtEdlqKYxWTy0S3viHaAth7yDk9ZseLOQUuNdIefen1xYFppbBpTFAMmaoy%2F8bFr5buX2chbWco%2BQ%3D%3D\"}]}\r\ncf-ray: 9bc48f1ce8ecc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26773,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26773), with no line terminators","md5":"48340306b6e29a9ae4df931f7ed45b8e","sha1":"4d30fcdf348222087793cc9cbc5ad3da479eb6fa","sha256":"922e01f7d5541547a4830fa5b4a34a3ec02c3c4c1f7579553bae179e0aa07d06","sha512":"422260204fb7ca363d8ee3104bfc7395ebb97d036e5ce0f17099533e799f4cd714ac703e5859d031837031b2745b33c78dd571907149289fc3ae45cb69f05b4f","ssdeep":"768:cOHDxKfTqb8J72Tl5N2ecFazlUwKxLh0Y/lt:b0BiN2ec0GNx6Y/L","tlshash":"0fc2b7325ad1504dbd37c672f8a2abdee217c04bf2634bfef9563db8c80a55405316a2","first_seen":"2025-07-19T22:15:42.02118Z","last_seen":"2026-01-11T12:54:14.144931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/js/logging.js?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/js/logging.js?rhz HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Mar 2023 04:11:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"64192e79-25b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmkCXt%2FVGXtf8D9Ru1c6W1LGDHVERISJwbNN7yWlvb9RW2lizJ6XnPvUavrA7MOlgcraIfWWLBSpd68GBiOQ7I%2FxN3s8tNcxSkrh9EzYdg%3D%3D\"}]}\r\ncf-ray: 9bc48f1ce8f3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":603,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"92ddc79dff91e0a9be13c94f3122aae9","sha1":"6f39ccdef7985993ff146788a514acd383f0f037","sha256":"88d5cf56033b00c9fb060189cb763a8a0566c888ed2bc57d6f78cd655e47f8fa","sha512":"c8d4ce9c22f890d5a7cfe2c860172d04a2fbd59c01137308d8f53f4556b8b40df3616031761899f9c9ee0a066a371ad9932d5c2d3699bb89887e1f43f30e1e13","ssdeep":"","tlshash":"4ef00244376b161e4b8033e0007b8e45ff787630d015a46ce4103ac13e39916d463631","first_seen":"2023-03-07T13:14:49Z","last_seen":"2026-04-01T11:10:55.025184Z","times_seen":359,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/pn.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/pn.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 592\r\nlast-modified: Tue, 21 Mar 2023 04:16:31 GMT\r\npriority: u=4,i=?0\r\netag: \"64192f9f-250\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALXdx9J3idehbJbO%2B9XvyXdI8m%2BAGKPn0f2ApBQjV1aOu6rfixLuq2sT2Ysmr1mFckeW4nL7QEE8Dga6z1CMiVxw9UdGZRP%2BU%2B3GZHy6Rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f2975c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 96, 8-bit colormap, non-interlaced","md5":"7899e665e913b4ba1d8d433e16f99e3a","sha1":"890f06e456f62b6572100aa640f9ae2f2aab1aa3","sha256":"525036fe705bc74f4b46e9faa480ecd23f7ffc872974c8f0aaed7aad408de2ad","sha512":"008dcbf53540294f806b21f88a7e07ca03cb37cb0109fb61b5c239158510474f6ef61ab93bfbdbe61a2ca56fe418ada1d05c713c7013f31ca1c6ba170e6025ae","ssdeep":"","tlshash":"73f0e191bf4a870d7f4616149ac7a1b5f499934e068e8987e8c0417a52fb444f1cfcf2","first_seen":"2023-05-05T20:14:48Z","last_seen":"2026-04-02T08:22:15.528637Z","times_seen":346,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/nv.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/nv.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1939\r\nlast-modified: Tue, 21 Mar 2023 04:16:52 GMT\r\npriority: u=4,i=?0\r\netag: \"64192fb4-793\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0VaTs3anSl82DobvO9ACb3qxdbF7THi%2BnLWbqpfkGuizvvMWZf6x1j%2FGdIVQLHOItqjlw%2FoU%2FUEblj7KQtigkuHJb5mrk9ePOgn9aDom3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f2976c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 66, 8-bit colormap, non-interlaced","md5":"b02c0551341677c53349001303d4151d","sha1":"6b139c240260f32e51576da4c6116fcccdca9ba7","sha256":"36b50a166399a572b49419de731c7fcfe8dd5507568a6b5b2810ba52c1ff6495","sha512":"2b7996f2751e04f8400f6441f31182a8459386fc11446af8c1ab793f31c74076b4df068bb78244d7d672e0386369e98fcbccf2e010bad3e381e8deaf5650c9db","ssdeep":"","tlshash":"6a41c6cdfac5780155c8e69569f64007c7039e82c8d6f89938fa8c0645fcab86c12ecb","first_seen":"2023-05-09T04:38:37Z","last_seen":"2026-03-08T11:20:33.871794Z","times_seen":206,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/qmenu.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/qmenu.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 225\r\nlast-modified: Tue, 21 Mar 2023 04:16:39 GMT\r\npriority: u=4,i=?0\r\netag: \"64192fa7-e1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BgrlLcD85FA7JkpWJfPRXLytrjvTV9HEXNCdKV7XogVjdsXgKoBkrxxgMhKNtIddohDHrCaHc7RniMqhi8flse6DAlua1v%2BgegJJja%2FAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f2977c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 113 x 53, 2-bit colormap, non-interlaced","md5":"ae1dc766a431b3eecce822e4b96a292b","sha1":"dafff6b1084db2fb0bef0eb6cd88517e260e8745","sha256":"16c8426119bd296f4aa1cc8c1b516f8f8603dde679fc97cba75c61b6a719f2ae","sha512":"027658759300a640331ac42a3606a1b376422df69b1b0673d5f13f51f0cfa0b05e7333328d47a3134989d5c837eba235437310e924efa138828c1db7f1f5f963","ssdeep":"","tlshash":"ffd023d3ef451d656375463f5fd1401291c947c5c1551717d605c01557cb142d051977","first_seen":"2023-05-05T20:14:48Z","last_seen":"2026-04-02T08:22:15.651648Z","times_seen":351,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/nv_a.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/nv_a.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2076\r\nlast-modified: Tue, 21 Mar 2023 04:16:41 GMT\r\npriority: u=4,i=?0\r\netag: \"64192fa9-81c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pOGAUPH5pGhdCPCC6PpAIfacU404G7kSFgvUykZjnZUVskn1AOGxjdUA14WjJrrG2bz4jbScEYI5ODbZuakPEqdLTjSTTLkBVrIFpc4YuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f3978c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 132, 8-bit colormap, non-interlaced","md5":"30006d8eff8bfbb4e29701eb30a18320","sha1":"ea849a9273076997c43fd178296b77e04f28fa48","sha256":"1d4bcffdc9c7bfa0d785c9d0db50c2cb94e15c81978d68d0f5a8caa1b201685c","sha512":"312187b84052881f85a2fbc73ed4642c06c4b8b6fe8d95bc860d81ad1db96c30574e5052bbd332af8f3a30307eae98d8efdeffb2bc5ebe660d4a31237e9c8a22","ssdeep":"","tlshash":"9241d6cceb506d80e50adf941ce5401bc6661cc4a4d892a87acabd5b49b21f3098eac7","first_seen":"2023-05-09T04:38:38Z","last_seen":"2026-03-08T11:20:33.873675Z","times_seen":206,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/home.php?mod=misc\u0026ac=sendmail\u0026rand=1768136027","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /home.php?mod=misc\u0026ac=sendmail\u0026rand=1768136027 HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: aWvh_2132_lastact=1768136027%09home.php%09misc; expires=Mon, 12-Jan-2026 12:53:47 GMT; Max-Age=86400; path=/; secure\naWvh_2132_sendmail=1; expires=Sun, 11-Jan-2026 12:58:47 GMT; Max-Age=300; path=/; secure\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Em%2FdDKZbmPE%2BBZH6rXSSQ4WO3vsk%2B33jmlnkpOrrWdYFEPgSgYS%2F900o2Ms81%2FUYHclL%2BtTGvKhm3LTp4nwF9mbs5P5%2Fsi585bJye5XHtw%3D%3D\"}]}\r\ncf-ray: 9bc48f1cf8f5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/search.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/search.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1301\r\nlast-modified: Tue, 21 Mar 2023 04:16:37 GMT\r\npriority: u=4,i=?0\r\netag: \"64192fa5-515\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8US%2FvVfREcbPoUKuOlqgcZ3WAtwl9ddZYVHGcLj02iatMvZYI7HAY4dlIguY2Z3UMxCjqFnjimtalR3ClJiLaqh6zNvOpOPmFSsP6tHsUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f3979c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 250, 8-bit colormap, non-interlaced","md5":"9be14dfd232fdfa065ee9b918b1c3d52","sha1":"2509b10bc5604e142c610224a67e617eb2720d6a","sha256":"53011dd9bfefc55a2234215ed39e524e53324e392625af441e5fe2b479050805","sha512":"bfc0a68e73203011691494b4f1e2e6200d832dc9bebac2177566919ba6fb03c3be90fad75e607cd2fbb4b68099a743595a62a158faf17ca499969aafd6479b1c","ssdeep":"","tlshash":"8321a7ed82d41d5de4242ee787cc250b1c660e099844526526817e347d39dd3afab9c9","first_seen":"2023-05-02T06:41:17Z","last_seen":"2026-03-31T06:34:26.098558Z","times_seen":405,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/pt_item.png","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/pt_item.png HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 3598\r\nlast-modified: Tue, 21 Mar 2023 04:16:19 GMT\r\npriority: u=4,i=?0\r\netag: \"64192f93-e0e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeaL8LE3z1IxZ0SN8Z7pLIsywruTkdufF%2BO7RWPHS3XJ6L1omy4aKjRuhIxA1%2FKISTLEO1p%2Bgy1%2BZYfAhW1LCV11cHpk1JM%2BkrVs9m6fMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f397ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit colormap, non-interlaced","md5":"7c38a4ac700c4df1cce9ebbf9b5909a3","sha1":"35bed3762414178d208e54c9c34ba6276de8cb46","sha256":"5c872d994d0fcb495c1ab307b17fed7fa88db8d4b30dd10a4a164d50dd49ca2c","sha512":"c7de409f008d41b3b327b5a38188c41a4ba0ba681610ae2e2154a84c7dd50f47f62d7855ecb243242b13c97b75b7b824e987e34a5f6eb3d187a91fe213a8cfdc","ssdeep":"","tlshash":"f1714baaa5b0e05b3de979110dcd4a42ce98216ca8632f5ca1d224dd5095f076f6903a","first_seen":"2023-05-04T01:00:46Z","last_seen":"2026-03-31T06:34:26.105257Z","times_seen":451,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/feed/friend.gif","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/feed/friend.gif HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 130\r\nlast-modified: Tue, 21 Mar 2023 04:17:20 GMT\r\npriority: u=4,i=?0\r\netag: \"64192fd0-82\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOlnnvnMJw1KLORqghn5SYuuGKkq4JQdsRUd9DIJsmcpCFZy108dPLRXxtEYMWV4MNMvppi3NeMHIlWgDI3V1f4TtPW5tRNS3AvK4mLftA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f397cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"adab9d697bf40b42c41e144399540e77","sha1":"79008840a4a27700e81fd6b55799c6aed44384e0","sha256":"a523f854d3ef24e4bb3baeed3b16e67ee5e5caa71e292ffe5ba3b5966b69fcb3","sha512":"b804b07b77888876983f1c88b2e50fe60e5957fe456f2ac6cc9637ce6f4e928f6448e7b6f4b5fb550055f3d66945d0904b6deea6e0e42596434a0847f601275b","ssdeep":"","tlshash":"67c09b45d7516835c47c7369572d59f5b157511d421d06104ee434599d1703d1171664","first_seen":"2023-05-06T09:00:39Z","last_seen":"2026-04-02T08:22:15.536337Z","times_seen":90,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/favicon.ico","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Mar 2023 04:10:33 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"64192e39-15b6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oOXJ4ITZb8wg2KRG0VT3KfbgVabUEBMzr40%2F73xeXBQm0of4gsBmD2dqHqQtZveHcjnCMHm31nQQmRDedwfo4RAGi%2By0bpfHhVm%2Bub5Bnw%3D%3D\"}]}\r\ncf-ray: 9bc48f20f9edc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5558,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"c028c4822428e83a358c60a93ef65381","sha1":"5bf4e81d7bd3cdec66d9fb5962d83446bd428102","sha256":"7abda15c7f2a33108e2cf8941b785f5583d2f1be8640649e87358b22b2cc3fb0","sha512":"58270113a8485a98b765737c81039d7a140a4ad949944dbc9fb7da6604f0275cb017055b5274ca30ee5b02b7ac77a7918e47416962be555222c1715ab43c9cda","ssdeep":"96:PTUAwp1DoXoVbU8LKV32+fS3K1mmrv0njPqZoUn0TfUnSUnLUn4iLsBzmnA:Q4lNvELLtUsfUSULU4iLaKn","tlshash":"beb1dcc185e927b6ca348176d44294b2043bfe6d4566a352c8393bad20f2163f3af377","first_seen":"2023-05-05T20:14:48Z","last_seen":"2026-04-01T09:29:12.897587Z","times_seen":417,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/data/cache/style_1_common.css?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /data/cache/style_1_common.css?rhz HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Mar 2023 05:05:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64193b1f-11455\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVF6TSyqQPyEiU0mWf%2Fg6mvMQenB4SEGQU5Ks5sivA188C0P4gobicddDQM1Uq690VRsJKYAdEyroFbHSv0U1XtjM2HmSzphBIFPMGK%2BMQ%3D%3D\"}]}\r\ncf-ray: 9bc48f1ce8ebc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70741,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8c53128bcf729888bc3c5e5372f26f2e","sha1":"80f37d9cde31cdfd0b64062ee32fe546b620486e","sha256":"c532d098a7978d94ca2a49b44bd9dc0b5998561b2d3595c0c5ab1bba092b70e5","sha512":"80d37b87c20fa3ea30aa47595a7e97876a97055d3911662748a4a2c1711d484a76b0285d901b455505cd5c0d54495f1c8b82a68b02b29b778b6f5581e428cf1c","ssdeep":"1536:b6KAIlUyMXLxkaSjCuSjdMtSJqtK9C+ljqJd3pGH5:DjlTv/YmG","tlshash":"0a6394329ad1505eb937c633b4b6a7ddf117805be2530ffaf56639b8c80646108327aa","first_seen":"2025-07-19T22:15:42.003399Z","last_seen":"2026-01-11T12:54:14.161764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/js/common.js?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/js/common.js?rhz HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Mar 2023 04:11:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"64192e7b-11934\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbYRXhSOEU1swQT5oH1PY3AIKHOp3UvH9P2tz%2B7N9rIIwtfS7WiIssM6LUyYEAP1FmtCfJ4TWwBhTC6oBw5%2F0LKZlf8lEpKroQW0mrGwsw%3D%3D\"}]}\r\ncf-ray: 9bc48f1ce8edc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71988,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (892), with CRLF line terminators","md5":"665b8bdff29038fa95b4ce6551d292f6","sha1":"54af9f4bd724a7eaca9710917deb032f00434874","sha256":"1844aaf57fca7f81c1c9f7b42a12ce3a5a05041551a5b2998076bf689711efee","sha512":"341007dc4c4840fc10e9d78e071fe2fc4b30754f4f09f83758e0e39c1a6752580184b9f16bdd5c420828a0c986960dc8502ca81b5b55f54ecfb2271a1fb44e99","ssdeep":"1536:RwF+GXNKKmy0HwP4Q4YWArpWqPGyc4Ieb1uAIP09S/0x4ARmn/S7TL32fd:pGJ1zrpWqPdc7+1PIgdRV3E","tlshash":"9063e864320d613d82d63326863e9944ec7cd8365307d4f8f868d8d864b0e7aa7a6dfd","first_seen":"2024-08-19T17:46:57.451611Z","last_seen":"2026-01-11T12:54:14.163983Z","times_seen":5,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/uc_server/avatar.php?uid=5248004\u0026size=small","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /uc_server/avatar.php?uid=5248004\u0026size=small HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 11 Jan 2026 20:53:47 +0800\r\nexpires: Mon, 12 Jan 2026 20:53:47 +0800\r\nlocation: https://www.hker2uk.com/uc_server/images/noavatar_small.gif\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guaNcUrydmRg%2BomrXN%2F091IqUwK7bMSiPAm60P3A2445WzHWeGItGUJIqADAOAIVCtjQOdidOp81RLH%2FxUYM6bpj3pTBFwTYmpqFFGwlYw%3D%3D\"}]}\r\ncf-ray: 9bc48f1cf8f4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/uc_server/images/noavatar_small.gif","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /uc_server/images/noavatar_small.gif HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1574\r\nlast-modified: Tue, 21 Mar 2023 04:11:24 GMT\r\npriority: u=4,i=?0\r\netag: \"64192e6c-626\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0J6f4b6vcTl1kFpmgmUrR6qN9uV2c0FVjLK%2BZZVp4jw9PTW3af8BvzLYZ%2FavSfrQjdl8no2XAFse2IJn5Pka979mZNDVmNVZoVp1%2BhTmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1eb961c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 48 x 48","md5":"4d90ab1de43eaee5d6485e1ac18da854","sha1":"55271db2eab1e24e6b210528781a38ec641d39fd","sha256":"b01adc592ce7f0c64a524a169c97d3d9fa63b3ba4b96b27adb68e127cf2392a9","sha512":"75bebf18efcc6ef98a3ff2de244316c25a412de6485d388cd356fad49c6a258ab6ffed0d56dbf11dfd4e3b697d1892933ab0f0986afa5b8e04fe0909dbfb3fa9","ssdeep":"","tlshash":"cf310c9fdd6b50024bb6c61872dc8ce79f611c3d97a1b6e1b08dc17b540935c7791d42","first_seen":"2023-05-09T04:38:38Z","last_seen":"2026-04-02T08:22:15.642887Z","times_seen":125,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/newarow.gif","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/newarow.gif HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 327\r\nlast-modified: Tue, 21 Mar 2023 04:16:24 GMT\r\npriority: u=4,i=?0\r\netag: \"64192f98-147\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GUEuyslMVGag6TcXT2Ti6rRfhz9ctprj49TvLrfV8XN00ne8yweJGvYmD4CXwvuE%2BhIHP25C3VhsLse2kfJbqNDMEOnar9ba7B24lnglw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f2973c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 46","md5":"9df8c0bbbf3885c3cecc424afda95306","sha1":"936d2a15b8379cca338eb67573bbbd120b6c864f","sha256":"144378b0a6ca8b3f4c2fa9ba0fe9dc1ef6e0e91655aa0e9415f5b7ec83bf4028","sha512":"8fb6a09980ebe7100748bd02508f544eaffd0977294f92e271f5ab4c1e3cd65f99adbff08ebcb393ad4b430a8fda5c4759dab40c396af746c1a30d840f02b100","ssdeep":"","tlshash":"e7e07d9e94525b14e0bca5984cac46fcde1a23b145fc3e0f584542e06533ed399052d4","first_seen":"2023-05-04T01:00:46Z","last_seen":"2026-04-01T11:10:54.989101Z","times_seen":350,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/static/image/common/pmto.gif","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:48.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /static/image/common/pmto.gif HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/data/cache/style_1_common.css?rhz\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09misc; aWvh_2132_home_diymode=1; aWvh_2132_sendmail=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 152\r\nlast-modified: Tue, 21 Mar 2023 04:16:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64192f97-98\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7c3YdHrti%2Fu%2BgwwDBF4PneSLE501sW%2BsOQXNXhmZ0Ff0UyzFySwgj2Ng7qDBZh6myHOUshVhqOVG9JGG26n%2FQ1lRnT8pk8aaZsPKANnIKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc48f1f397dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"b382eababd512821a7d5a69f219a06f2","sha1":"ac762e07ae28565c051d9af08b16330815a22b89","sha256":"a174966ea5befd72af8641bd1175709f1aa4d5e282a7c7931cebf87ca12874d4","sha512":"5ff467a44de2bda11c1b7528659af880f51f1c0bbf39a0f04afb874485974ce9340443d320878b29d0a8140acc665f8007da3d5362c242a06ab9cceb2bb82570","ssdeep":"","tlshash":"b7c02badcae1e4b2f189f7301d55c35228436b12835007d8f22e1fb830555a3407a894","first_seen":"2023-05-09T04:38:38Z","last_seen":"2026-04-02T08:22:15.525151Z","times_seen":105,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hker2uk.com/data/cache/style_1_widthauto.css?rhz","fqdn":"www.hker2uk.com","domain":"hker2uk.com","tld":"com"},"ip":{"addr":"104.21.18.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004","date":"2026-01-11T12:53:47.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hker2uk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:55:19 GMT","end":"Tue, 03 Mar 2026 02:53:05 GMT"},"fingerprint":{"sha1":"4D:6E:AA:AF:38:27:8E:52:8B:06:F6:D3:44:CE:59:7A:11:67:82:1B","sha256":"C3:D0:E6:54:17:3E:D9:0E:3A:61:0A:0A:01:15:7A:4D:82:4C:D0:7B:6B:57:2D:A7:DF:08:49:6B:AE:3E:5D:35"}}},"request":{"raw":"GET /data/cache/style_1_widthauto.css?rhz HTTP/1.1\r\nHost: www.hker2uk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hker2uk.com/home.php?mod=space\u0026uid=5248004\r\nCookie: aWvh_2132_saltkey=MltaYHyK; aWvh_2132_lastvisit=1768132427; aWvh_2132_sid=FoSOtx; aWvh_2132_lastact=1768136027%09home.php%09space; aWvh_2132_home_diymode=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 12:53:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Mar 2023 05:05:35 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"64193b1f-5d0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGM8RpKLZUOmzGDecQPobWaw54qWB4R0gWzK4WMvAIynjIjR4N7ig5Ui5Bh4TLh9v5ImQP0bEbUVCyiiy9IwFbTvdEEBp8OPMnGamxYrkQ%3D%3D\"}]}\r\ncf-ray: 9bc48f1ce8eec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1488), with no line terminators","md5":"d0718d0ed991f3f8109ad09b430c57a9","sha1":"bb2b1e4c09bc5f363645fbc0359920d6e6629fd1","sha256":"07be52a1c42b5be43c3da0817ee3610039026e6e36ed5c531a94ebf7d3e85344","sha512":"b089453502877b63042d5dbab6acd80d5ff46cc279b3c3e786c012720719814e7aab959b4b690e2a82ff221786ef800caf533ce2a8fa1db5d8ee65431f5cde23","ssdeep":"","tlshash":"3a313ba11bf2a10ea807c72bf4bd53ac22106066f397159679366574df0fb5b0d235e1","first_seen":"2025-07-19T22:15:42.019827Z","last_seen":"2026-01-11T12:54:14.167902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"www.hker2uk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}