{"report_id":"46af1278-faef-4523-b507-e411dc938184","version":0,"status":"done","tags":[],"date":"2026-08-05T19:56:17Z","url":{"schema":"http","addr":"crdclub.su/","fqdn":"crdclub.su","domain":"crdclub.su","tld":"su"},"ip":{"addr":"194.58.112.166","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"title":"Кардинг Форум / Carding Forum","dom":{"size":19087,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"90a7a794e922a8014a529e9e2c3c516b","sha1":"764975c4007938cc30f014dee2e6ddd284117456","sha256":"5c34ed096b0b71914a72f1bff25bab8ea31f9c46fbf86cf75aa436f21877581e","sha512":"9638d83a7828fd46ba2fd33e89b37554b8976125b5c822098ac40a6ccf35b039188ebf6c760c763dbd10c1ebf32ffe30b66b5e6ad548264be90a2d91023d0cc3","ssdeep":"384:21Uf+/d6s7WhAJhofEdtvg+RbRruraRMcbtFNHxFGKzQTVKQ6nmdY3nqdcR+8:4p7WhAJhofkMcbtFNHxFGKcTVKQ6nmdM","tlshash":"5582c712dd452c16200720e8f221da95bb7fd04afa1baeb0b6fe16b4cf886dc55657c8","dom_hash":"domhash86edb8d0a65cae273ab6eea0aa525758","first_seen":"2026-08-05T19:56:21.000322Z","last_seen":"2026-08-05T19:56:21.000322Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"crdclub.su/","fqdn":"crdclub.su","domain":"crdclub.su","tld":"su"},"ip":{"addr":"194.58.112.166","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-09T19:56:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"crdclub.su","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"crdclub.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"2crd.su","ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-08-06","domain_rank":0,"first_seen":"2026-05-16T20:55:37.774865Z","last_seen":"2026-06-06T08:48:56.55423Z","alert_count":20,"request_count":20,"received_data":246135,"sent_data":11135,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YUI","description":"YUI is a JavaScript and CSS library with more than 30 unique components including low-level DOM utilities and high-level user-interface widgets.","website":"https://clarle.github.io/yui3","common_platform_enumeration":"cpe:2.3:a:yahoo:yui:*:*:*:*:*:*:*:*","icon":"YUI.png","categories":["JavaScript libraries"]},{"name":"vBulletin:3.8.7","description":"vBulletin is tool that is used to create and manage online forums or discussion boards. It is written in PHP and uses a MySQL database server.","website":"https://www.vbulletin.com","common_platform_enumeration":"cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*","icon":"vBulletin.png","categories":["Message boards"]}]},{"fqdn":"crdclub.su","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-06-29","domain_rank":3105393,"first_seen":"2013-12-04T17:43:15Z","last_seen":"2026-08-05T19:45:29.951561Z","alert_count":4,"request_count":2,"received_data":309,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"2crd.su/arcticmodal/jquery.arcticmodal.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b3e4acc92cc9cb2fabb484f33eb98c6","sha1":"856feeb385a4e96427fb279af893b25706c18f9d","sha256":"be2e99b97fa562d090e1db2f9efa719f30981caa8e4b9c65c6632d80dc838562","sha512":"2f154192b78ace3eeec1ee667bd6c3d68b9f5ec5a7bcfb4df5779fee8cb11059f6d10f54022dcf75847742ce50a8a627bf31ac42f499a07d18d8a89f5378ac7a","ssdeep":"96:IrlBEiQHg5rr15z8oK4KWaQJE+TfgXwGQJ/NtToYyqhKj9EtsE0JDeL2:8BEiQHMrr15AoK4Ko6wJNtTjyNj9EtsN","tlshash":"fcc1631c7e6f35db90fe3528a02b4a057231b5eaf7164c88f056dd188e69e131871eed","size":6122,"data":"","first_seen":"2023-03-12T06:08:36Z","last_seen":"2026-08-05T19:56:21.036231Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/onion.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb65c6a2b435fde06a5fd63744cb3c6d","sha1":"50b0dc68230396469ff5b15d04488f065b7b6bb5","sha256":"131b5f0f748275cdac97afc45115e32c274091233044bc5633411277c51e58a9","sha512":"eeb20d51d1b8cd084c08a4df20a5a3a145a70ae1c6497c615bb08f67957f8f4a8a9adb7d0b9ea31c047723976bed5f98ad345ca107833bdaa6243232134ab7d2","ssdeep":"","tlshash":"38d0c9db198067513be21203ce53a204357321ef2901a5528d925500b568faf966aadf","size":204,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.034413Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_menu.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"87b47acaf36c7a6d8829ef6977d7548b","sha1":"0cbc61f9c7a86e05d665f5957a72aa82c27def61","sha256":"0724508185a8bf666d977bbfe9329210d581563a4936d14e11813d62155de03b","sha512":"0fa208c7339affe2f8b838d24e628388e226daa4a857c554ed8b04d1883b77ca3a366c4b0803c76a8efd258a22bfe24f58c5d91d0a6dd9d23cb3c5928b26fcb7","ssdeep":"192:BzD2kGrKypuEZcppUDiY72Ka0dhDzifARVTi6y6Y6Oe616Y6e62O9QwDrskSN2ZM:BzD2k5ypuEZcpaDiY72Ka0dhDzifARVq","tlshash":"db1263862e5825324395d15c72eb8336a231905e9d4bda0d78fcbde50df274410efbba","size":9442,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.004335Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e3ae302f1f93166e73deef9512846bd","sha1":"fb16982571b56e3d491bd81398ff9a254936eaef","sha256":"72ccd47dddf2c9e1bd77f95fabd0b85a3e7a7634285d2cc1c1cb96405d788e56","sha512":"df5c3c2ba82d80d91a010a4e2c3a08494838cf183e22f77f313ca20fc503da02fbfc9cbb081a9f3d8f10a5dc408aa686ff31e3e3c4904e46482ea9870af9eb44","ssdeep":"","tlshash":"7cc012270b949c094475b69839af981b4ac5ca748a00e21b164fc580242d893a2d9a6d","size":177,"data":"","first_seen":"2026-08-05T19:56:21.038634Z","last_seen":"2026-08-05T19:56:21.038634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0205a1c47bc656a0408e24f32b772451","sha1":"f9951c1ec86ffe3240d1331cc2fa77adda04b7fa","sha256":"6e89ceac1e44b25035e99546e53b2ab615feb2dee6d3a34420606e6cf803dbf9","sha512":"09c171a17cace1b2ddc4e219a11d884a9b2509ceb60870d83bfdcee8c6775f365ecc356adfa4684457fe407a980ba51fec4c01eb046387696f1bc354811dc2f3","ssdeep":"","tlshash":"f411382cb5f120240177b1b42b1f59081d76309fa50b8e407d8daefe4f51929d3a7f28","size":1100,"data":"","first_seen":"2026-08-05T19:56:21.040339Z","last_seen":"2026-08-05T19:56:21.040339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"33c7b5f99613b9aa972739e1553e7e72","sha1":"f7f9c6202828001423ccfe19ab14f137e2c6842d","sha256":"a59b7883cc204d3fd5a5b2bf4531ff42194a4edcb1d4b911be735efb119745be","sha512":"307bc6bee7429d54302cb228e1a93b8e2a450c699456e11b9b78a4c23f9c37232b381159b9aecfe24a18f7f01d55d37b03cfe3b947883de3731a1a5ff27373f1","ssdeep":"","tlshash":"47800411145301531177c01d3347104575c44d140001c311451c510c75c701d5004001","size":32,"data":"","first_seen":"2026-08-05T19:56:21.042982Z","last_seen":"2026-08-05T19:56:21.042982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/kr_scripts/rbs_scripts/rbs_banner_sender.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"258705caa9bf4e4dae18917b7ad9d2e3","sha1":"4c9a3e39bf116c19d48a63726d327afe1ad20713","sha256":"fa329fcf2b782334e5ca46f3c6ece1302dc8b38fc7f1a138b7c297181b86b457","sha512":"8511c3af8384a0caac840bc180caeab5959fa26dbd6f3441e1d096971190365bfede0004d069393cd17ecd3ae1d4acb4aace5940fa25f699fb3d218c9e40fe01","ssdeep":"","tlshash":"0d21302a3ac048b73fe9646d84fe889674390d13135482e88114540b9c7c7dd44febce","size":1206,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.027423Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/crdclub.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4c69377f0310f79d83a69544c88643d","sha1":"a774193efc87dd39c3b5d21b42be5431dd741e02","sha256":"511015a1a37007e02d4cb5bbc6d3f6cdedb45f9cb16b8c23d3555d6269ab603b","sha512":"e49407c639755bf3663473ce92b1407370258ee19978c37153677f9760b1ce4c089add9eeb2f449a00d3ec5e76638ab6bdfa6587318ab57beadcc9537458ead2","ssdeep":"","tlshash":"3c31d919f1e211251573b5359b6f9a09b4361047586ccd21fc0e92c49fa662cc6bbfa4","size":1517,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.018541Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/yui/connection/connection-min.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed935da9668b7350505daa30027a6f44","sha1":"10ebcea9a5b9a89ad271c462fdafb5d012b9af64","sha256":"a0297b3ea37cda46af5a08ed89b1563987e6f6a233286e1a373668776134841c","sha512":"b53009564c3e69ca1803a4f185e647226dbcaecd2bd58a7f0ff00645e475b13f163c3bd243000356843f8dab471c6eb842253cd2f74f9ed4e86155f3b3d853b5","ssdeep":"192:gzADNoHX4dmPXOYeylk25sOzIGDclyBeBUef913P6KnEyCUt:gzADNoHX4d5ylk25sOzlcUjefP3P6Zy5","tlshash":"0e32f936315124f34efe9055857f9f85ba3458972488b49a38e8eccf856cac1c06bfb8","size":11604,"data":"","first_seen":"2023-03-08T08:27:38Z","last_seen":"2026-08-05T19:56:21.026037Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f16dcd51fd1d51fac21a9724911184c4","sha1":"5549ff428576843dcbb70b9986e77dfbec09853a","sha256":"d40743d2f62e70a29644f823731551ac1f13903f07f8e0756aa664bb684f276c","sha512":"f754d5b364fd0697ad5f464555ea65ad786aa2e50a514eb0ffed96ef9eb68e1a0285f0f1feff43bab03aff3c8068acc76378c794a798128377a28bf149e38b3c","ssdeep":"768:gO7yLMbTHtxO03JQdPB4OdXkb3pOLVU2mTCTCraPKLIrC0qZbpa:jWLMbTHtM03JaZdXkb3pOLVNlPFrCppa","tlshash":"fbf2f8d937d2787603d6317a006fa605a23ba8d3998851d8e9e2e8c16d7478dc437fbc","size":36628,"data":"","first_seen":"2023-03-08T08:27:38Z","last_seen":"2026-08-06T03:34:04.776206Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_global.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fca43b6c0e4fcbfcaae98776bf3579e","sha1":"20b8b57b543e0e041b19d5457eca3be99af3da89","sha256":"ba9eadb7cbded72cf37c9249b43f9ddf9ac25ac1e981b3a1a572eb83876ae9aa","sha512":"20d8a4b61de7fd954295946f0051bd7cdbd9032309da401efcaec606dbe553a67f6aa6aaccaa84a8b502bef038374a25826230b2722f7e4d35b0899e44812b1c","ssdeep":"768:BzDP6MPks49ZGI8CNk2Zqs1nlwD6mlRO5/pbJxpivDloLX7:YEks49sI8CNLZqnD6mlRO5x1xpivDlsr","tlshash":"8ec209113a68697743fe91a51cef4509b1792d314a19a0a4e04ce6f538b0f8783ebfac","size":26028,"data":"","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-05T19:56:21.011151Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-06T05:44:53.191701Z","times_seen":71909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery.cookie.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","size":732,"data":"","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-08-05T19:56:21.02476Z","times_seen":1899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_md5.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5197e6df4b7a32c54834cdc210c866cb","sha1":"fa94d8ae90bd9a953934c4c4020718530aa8131c","sha256":"6e4ed9f4271f22c3bb4405155731f16c131e71d4c752060017496c0bbd2d5c85","sha512":"905a3b4e7ff32761ded7bf52b3bd6f9e0ca5934a014d22fbb24d3a86b88526ef6a873731da6d2dcb89ec8a13ba2b807ad365e2624c9caf10cdb3fc43392c55f4","ssdeep":"96:Aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMlzEA54aTfCNYKfLQX0rbaGXR7aw:FOq0xvNJUNOi4aTqSKzC0rvuMr","tlshash":"abb1fd40b381c175d7be8af07c8a1f4ef17e9aa808060408b4b29fdc9ded47944a9f1a","size":5464,"data":"","first_seen":"2023-03-07T12:10:30Z","last_seen":"2026-08-05T19:56:21.012638Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery_em.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b1f43de753f1692cc9cb306acd05349","sha1":"8cde8afe7b0c21e2c0abb001f3bf6016a4b27308","sha256":"1cbeb4f61de9a2d2765edb71cbc04377676ea34d94ca5ac3e2345ff40b1497eb","sha512":"e36d924fb1932aa902366fce4328b686c02a2098095963c147b66b42ca7b85dd0e30419d44a643218ab87b35d063730c7548925f97d69a5177467b939d4b79d6","ssdeep":"","tlshash":"c45185cdb3013150ca7b62b135afef0ea7379450adab5507b62d90122db9949115ff3c","size":2653,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.020519Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_menu.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.236Z","timestamp":1785959752236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/vbulletin_menu.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:53 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2664\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"24e1-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9441,"size_decoded":2968,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (8730)","md5":"87b47acaf36c7a6d8829ef6977d7548b","sha1":"0cbc61f9c7a86e05d665f5957a72aa82c27def61","sha256":"0724508185a8bf666d977bbfe9329210d581563a4936d14e11813d62155de03b","sha512":"0fa208c7339affe2f8b838d24e628388e226daa4a857c554ed8b04d1883b77ca3a366c4b0803c76a8efd258a22bfe24f58c5d91d0a6dd9d23cb3c5928b26fcb7","ssdeep":"192:BzD2kGrKypuEZcppUDiY72Ka0dhDzifARVTi6y6Y6Oe616Y6e62O9QwDrskSN2ZM:BzD2k5ypuEZcpaDiY72Ka0dhDzifARVq","tlshash":"db1263862e5825324395d15c72eb8336a231905e9d4bda0d78fcbde50df274410efbba","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.004335Z","times_seen":29,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":514,"dns":0,"connect":27,"send":0,"wait":182,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/images/BluEVO/bg.png","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:53.049Z","timestamp":1785959753049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /images/BluEVO/bg.png HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 12493\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Thu, 07 Jul 2016 23:40:20 GMT\r\nETag: \"30cd-53714357fe100\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12493,"size_decoded":12740,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 235x235, components 1","md5":"5d8cfa2f0494f4d51cb84dbae2341fbd","sha1":"2491b562d1938011ca0285d519fccc638fec3151","sha256":"0cfb718d3e327efc24d363ad41da72fc05fb6dbbf921c121af8fd78b1a34cd2f","sha512":"3868961ad4209c4982c333dbc8057df3501caa223d7a6d0dc35d6e4bef1e0dcb48d068ff5f32b4a79149d62fc8d86711e6f46d9a9d9f3b6a4cec3855e06ff775","ssdeep":"192:xYNMtKw/ubCDY5q5VMERkATmBdC+LPJvzTeinacL56ObQ9bNmzVMTnp55:xYNg7/uW4qrbAC4acLYObQVmST75","tlshash":"0742be768f0b357bc2b3e37812d14bc991db3a3567f6f71a568223150499d828c8f0b8","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-05T19:56:21.008446Z","times_seen":28,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":253,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_important.css?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.219Z","timestamp":1785959752219,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/vbulletin_important.css?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/css\r\nContent-Length: 598\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"6b3-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1715,"size_decoded":893,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"3de52290a2c800b556f8112274d6509d","sha1":"f0e612471ae900ed9dcdce5677f950f04e524b3b","sha256":"e6dc4a08dde0ed1fbd3fb0c40d685f825047d4f71953f114738e01d5e60e4222","sha512":"9ece86b43163cdd235223f6b136799e8fec75f4989a3c1a717e5429367c7d0d20d24ddb4a0f7a754eef8bb32c680269b917b554bdd663298dbc11e9d5fdf6103","ssdeep":"","tlshash":"9131cedc0ea132555721cb7f1bb22311cd6780306dc3a99ffcaca44251c9375266d64a","first_seen":"2025-06-01T03:04:05.093697Z","last_seen":"2026-08-05T19:56:21.009913Z","times_seen":12,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":174,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_global.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.235Z","timestamp":1785959752235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/vbulletin_global.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 8132\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"65ac-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26028,"size_decoded":8436,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25316)","md5":"7fca43b6c0e4fcbfcaae98776bf3579e","sha1":"20b8b57b543e0e041b19d5457eca3be99af3da89","sha256":"ba9eadb7cbded72cf37c9249b43f9ddf9ac25ac1e981b3a1a572eb83876ae9aa","sha512":"20d8a4b61de7fd954295946f0051bd7cdbd9032309da401efcaec606dbe553a67f6aa6aaccaa84a8b502bef038374a25826230b2722f7e4d35b0899e44812b1c","ssdeep":"768:BzDP6MPks49ZGI8CNk2Zqs1nlwD6mlRO5/pbJxpivDloLX7:YEks49sI8CNLZqnD6mlRO5x1xpivDlsr","tlshash":"8ec209113a68697743fe91a51cef4509b1792d314a19a0a4e04ce6f538b0f8783ebfac","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-05T19:56:21.011151Z","times_seen":29,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":339,"dns":0,"connect":29,"send":0,"wait":181,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_md5.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.239Z","timestamp":1785959752239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/vbulletin_md5.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:53 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2009\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"1558-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5464,"size_decoded":2313,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (5464), with no line terminators","md5":"5197e6df4b7a32c54834cdc210c866cb","sha1":"fa94d8ae90bd9a953934c4c4020718530aa8131c","sha256":"6e4ed9f4271f22c3bb4405155731f16c131e71d4c752060017496c0bbd2d5c85","sha512":"905a3b4e7ff32761ded7bf52b3bd6f9e0ca5934a014d22fbb24d3a86b88526ef6a873731da6d2dcb89ec8a13ba2b807ad365e2624c9caf10cdb3fc43392c55f4","ssdeep":"96:Aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMlzEA54aTfCNYKfLQX0rbaGXR7aw:FOq0xvNJUNOi4aTqSKzC0rvuMr","tlshash":"abb1fd40b381c175d7be8af07c8a1f4ef17e9aa808060408b4b29fdc9ded47944a9f1a","first_seen":"2023-03-07T12:10:30Z","last_seen":"2026-08-05T19:56:21.012638Z","times_seen":483,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":527,"dns":0,"connect":27,"send":0,"wait":175,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/images/flags.png","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:53.068Z","timestamp":1785959753068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /images/flags.png HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 1327\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Wed, 13 Jul 2016 20:09:08 GMT\r\nETag: \"52f-53789f53cc100\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1327,"size_decoded":1572,"mime_type":"image/png","magic":"PNG image data, 32 x 22, 8-bit/color RGBA, non-interlaced","md5":"74322dabf7f91ecee43b164b4526a5c1","sha1":"ec5738246444429f5f9adb8b16447fb4034e891d","sha256":"9a968022f3bbbb6375c1094df0aa5c64acaa1b9a365ed9f828b15fbac37c7c64","sha512":"977fb05ec35ff2ff253528fe3ccefba49ecfdc5382f9b09e40a00c19c0bb604b7b3035c40529432fe617479bfd2087a48dc7e40058e314f1ec549cc416ad0a9b","ssdeep":"","tlshash":"5121d5f28656a263d7f41c8b0c5b80b020a6bb08429689057efd7e7ba419e88b40db44","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-05T19:56:21.013737Z","times_seen":32,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":175,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/images/BluEVO/gradients/gradient_tcat.gif","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:53.070Z","timestamp":1785959753070,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /images/BluEVO/gradients/gradient_tcat.gif HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:53 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1063\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Thu, 26 Aug 2010 17:10:38 GMT\r\nETag: \"427-48ebd13bd9f80\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1063,"size_decoded":1308,"mime_type":"image/gif","magic":"GIF image data, version 89a, 27 x 38","md5":"f28bd436e03422caf7b73928f08b17d5","sha1":"be73b97f20029fc7916a04e00dac4096c461fc0a","sha256":"038357e458a7186524428ef2fa6259ffbacc0cba958740e0b9159af09be69872","sha512":"0026608d57b06e23fbea5d67b811b599f8daf8d0a924acc8a9381472c8966b88564a58030fa602a028ab532c51d715deefb2ba33c219fbd5b3a7b4793c6a49a2","ssdeep":"","tlshash":"eb112414163dd888cfbda8f9c88c0598259ce6492073fcc71c4590ba52295fdccbeb56","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-05T19:56:21.014767Z","times_seen":28,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":27,"send":0,"wait":179,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/favicon.png","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:53.400Z","timestamp":1785959753400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 8303\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Thu, 07 Feb 2019 11:59:46 GMT\r\nETag: \"206f-5814c941d5080\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8303,"size_decoded":8549,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"217f45b786ebf102cd45a604bd83f49e","sha1":"c4777122cddb96d929ed84b192b30650345b58e9","sha256":"8e64ed84994274b2631fadc9582c52a625fcb310d8e52ef0e35ff1b054e41cef","sha512":"779d892ce46072998bc2be1e5f8d7dacc529db95f496d852378bf88c116a50ce595c85247a6eafae561ce0743d08731b8422c582bcdb457c9cda2ec5ebac98d5","ssdeep":"192:6S0tKg9E05TLjznocaoSYrrIw5oxZ7IwqL:uXE053jzoToSAN6xrqL","tlshash":"8b02d01fd110e2de9de832505ec80b829a3923fef9e3169c54c02ded6c58c0626e34e6","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-05T19:56:21.01563Z","times_seen":28,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":175,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.220Z","timestamp":1785959752220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/jquery.min.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 32775\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 12 Nov 2018 13:13:39 GMT\r\nETag: \"169d5-57a777825e6c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92629,"size_decoded":33081,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-06T05:44:53.191701Z","times_seen":71909,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":258,"receive":2,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/arcticmodal/jquery.arcticmodal.css","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.224Z","timestamp":1785959752224,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /arcticmodal/jquery.arcticmodal.css HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/css\r\nContent-Length: 303\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 30 Mar 2013 08:58:50 GMT\r\nETag: \"28e-4d92098a56680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":654,"size_decoded":598,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"def37117c605c3e5ae3368d2d1e8d42b","sha1":"f33d8f201e2b1b50798b31e2e74cd8fb9af63427","sha256":"9d53ab0f38d422c274af1768e45246f52ab01caae916e7b0adee53af87c67166","sha512":"eb7eb16ecb05c8bb5f4bd23d18c08b064d44bd811b17fae4e9e2a80a27881ae84d0cf7750bc0e5e53796498d65ec9cebafddf6e9c57741e02a48b0d8e5eb885c","ssdeep":"","tlshash":"35f0d4591f2d228ab09c93a6b96acec49b3981a2e31500bcf5f0292dd18ca1214b5dde","first_seen":"2023-05-04T06:59:31Z","last_seen":"2026-08-05T19:56:21.017553Z","times_seen":97,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":178,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/crdclub.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.230Z","timestamp":1785959752230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/crdclub.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 808\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Wed, 13 Jul 2016 20:54:12 GMT\r\nETag: \"5ed-5378a96688500-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1517,"size_decoded":1110,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d4c69377f0310f79d83a69544c88643d","sha1":"a774193efc87dd39c3b5d21b42be5431dd741e02","sha256":"511015a1a37007e02d4cb5bbc6d3f6cdedb45f9cb16b8c23d3555d6269ab603b","sha512":"e49407c639755bf3663473ce92b1407370258ee19978c37153677f9760b1ce4c089add9eeb2f449a00d3ec5e76638ab6bdfa6587318ab57beadcc9537458ead2","ssdeep":"","tlshash":"3c31d919f1e211251573b5359b6f9a09b4361047586ccd21fc0e92c49fa662cc6bbfa4","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.018541Z","times_seen":28,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":250,"dns":0,"connect":27,"send":0,"wait":174,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.233Z","timestamp":1785959752233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 12907\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"8f14-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36628,"size_decoded":13212,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11752)","md5":"f16dcd51fd1d51fac21a9724911184c4","sha1":"5549ff428576843dcbb70b9986e77dfbec09853a","sha256":"d40743d2f62e70a29644f823731551ac1f13903f07f8e0756aa664bb684f276c","sha512":"f754d5b364fd0697ad5f464555ea65ad786aa2e50a514eb0ffed96ef9eb68e1a0285f0f1feff43bab03aff3c8068acc76378c794a798128377a28bf149e38b3c","ssdeep":"768:gO7yLMbTHtxO03JQdPB4OdXkb3pOLVU2mTCTCraPKLIrC0qZbpa:jWLMbTHtM03JaZdXkb3pOLVNlPFrCppa","tlshash":"fbf2f8d937d2787603d6317a006fa605a23ba8d3998851d8e9e2e8c16d7478dc437fbc","first_seen":"2023-03-08T08:27:38Z","last_seen":"2026-08-06T03:34:04.776206Z","times_seen":304,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":265,"dns":0,"connect":27,"send":0,"wait":257,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery_em.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.222Z","timestamp":1785959752222,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/jquery_em.min.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1191\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 25 Jul 2016 20:29:08 GMT\r\nETag: \"a5d-5387ba2dbcd00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2653,"size_decoded":1494,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2361)","md5":"5b1f43de753f1692cc9cb306acd05349","sha1":"8cde8afe7b0c21e2c0abb001f3bf6016a4b27308","sha256":"1cbeb4f61de9a2d2765edb71cbc04377676ea34d94ca5ac3e2345ff40b1497eb","sha512":"e36d924fb1932aa902366fce4328b686c02a2098095963c147b66b42ca7b85dd0e30419d44a643218ab87b35d063730c7548925f97d69a5177467b939d4b79d6","ssdeep":"","tlshash":"c45185cdb3013150ca7b62b135afef0ea7379450adab5507b62d90122db9949115ff3c","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.020519Z","times_seen":28,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":176,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/arcticmodal/themes/simple.css","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.225Z","timestamp":1785959752225,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /arcticmodal/themes/simple.css HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/css\r\nContent-Length: 291\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 30 Mar 2013 08:58:50 GMT\r\nETag: \"1a5-4d92098a56680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":421,"size_decoded":586,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d57e6881fc7ea8b30df11b0da881a340","sha1":"5712fcdc18b9689054dc0506192bbef838ae8f55","sha256":"8cf3b2b1df1ac474a89f169d8244e1c2bdd705a807647fc39356d9f35cbd84ab","sha512":"a2d73d74e08f1a3bfb57ae021ab9ab36b181c17497ef7aaa6febbc63aae61013f88bf426383f83c80d6423831469101d847d130a75b55d270b807d8cc40776dc","ssdeep":"","tlshash":"95e05c15cfac031d315b717ab2315fd71f140119902a472e30b4e121a1de46859607e0","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-05T19:56:21.021577Z","times_seen":38,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":174,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery.cookie.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.229Z","timestamp":1785959752229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/jquery.cookie.min.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 421\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 12 Nov 2018 13:13:58 GMT\r\nETag: \"2dc-57a777947d180-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":732,"size_decoded":723,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (732), with no line terminators","md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-08-05T19:56:21.02476Z","times_seen":1899,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":246,"dns":0,"connect":27,"send":0,"wait":175,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/yui/connection/connection-min.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.234Z","timestamp":1785959752234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/yui/connection/connection-min.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3803\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"2d54-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11604,"size_decoded":4107,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"ed935da9668b7350505daa30027a6f44","sha1":"10ebcea9a5b9a89ad271c462fdafb5d012b9af64","sha256":"a0297b3ea37cda46af5a08ed89b1563987e6f6a233286e1a373668776134841c","sha512":"b53009564c3e69ca1803a4f185e647226dbcaecd2bd58a7f0ff00645e475b13f163c3bd243000356843f8dab471c6eb842253cd2f74f9ed4e86155f3b3d853b5","ssdeep":"192:gzADNoHX4dmPXOYeylk25sOzIGDclyBeBUef913P6KnEyCUt:gzADNoHX4d5ylk25sOzlcUjefP3P6Zy5","tlshash":"0e32f936315124f34efe9055857f9f85ba3458972488b49a38e8eccf856cac1c06bfb8","first_seen":"2023-03-08T08:27:38Z","last_seen":"2026-08-05T19:56:21.026037Z","times_seen":335,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":266,"dns":0,"connect":28,"send":0,"wait":175,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/kr_scripts/rbs_scripts/rbs_banner_sender.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.239Z","timestamp":1785959752239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/kr_scripts/rbs_scripts/rbs_banner_sender.min.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:53 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 547\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 11 Mar 2013 14:44:22 GMT\r\nETag: \"4b6-4d7a735627d80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":849,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1174), with CRLF line terminators","md5":"258705caa9bf4e4dae18917b7ad9d2e3","sha1":"4c9a3e39bf116c19d48a63726d327afe1ad20713","sha256":"fa329fcf2b782334e5ca46f3c6ece1302dc8b38fc7f1a138b7c297181b86b457","sha512":"8511c3af8384a0caac840bc180caeab5959fa26dbd6f3441e1d096971190365bfede0004d069393cd17ecd3ae1d4acb4aace5940fa25f699fb3d218c9e40fe01","ssdeep":"","tlshash":"0d21302a3ac048b73fe9646d84fe889674390d13135482e88114540b9c7c7dd44febce","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.027423Z","times_seen":32,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":520,"dns":0,"connect":28,"send":0,"wait":183,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crdclub.su/","fqdn":"crdclub.su","domain":"crdclub.su","tld":"su"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-05T19:55:51.154Z","timestamp":1785959751154,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: crdclub.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"crdclub.su","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"crdclub.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"crdclub.su/","fqdn":"crdclub.su","domain":"crdclub.su","tld":"su"},"ip":{"addr":"194.58.112.166","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-05T19:55:51.489Z","timestamp":1785959751489,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: crdclub.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:51 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 299\r\nConnection: close\r\nLocation: http://2crd.su/\r\nX-Request-Id: 485a7c5059e9dd33661d610d335a3ffd\r\nExpires: Wed, 05 Aug 2026 20:00:51 GMT\r\nCache-Control: max-age=300\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":4,"connect":40,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"crdclub.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"crdclub.su","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-05T19:55:51.594Z","timestamp":1785959751594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/html; charset=windows-1251\r\nContent-Length: 4967\r\nConnection: close\r\nCache-Control: private\r\nPragma: private\r\nX-UA-Compatible: IE=7\r\nSet-Cookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; path=/; HttpOnly\ncclastvisit=1785959751; expires=Thu, 05-Aug-2027 19:55:51 GMT; path=/; secure\ncclastactivity=0; expires=Thu, 05-Aug-2027 19:55:51 GMT; path=/; secure\r\nUpgrade: h2\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YUI","description":"YUI is a JavaScript and CSS library with more than 30 unique components including low-level DOM utilities and high-level user-interface widgets.","website":"https://clarle.github.io/yui3","common_platform_enumeration":"cpe:2.3:a:yahoo:yui:*:*:*:*:*:*:*:*","icon":"YUI.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"vBulletin:3.8.7","description":"vBulletin is tool that is used to create and manage online forums or discussion boards. It is written in PHP and uses a MySQL database server.","website":"https://www.vbulletin.com","common_platform_enumeration":"cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*","icon":"vBulletin.png","categories":["Message boards"]}],"data":{"size":19915,"size_decoded":5478,"mime_type":"text/html; charset=windows-1251","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"d587d16e52e8c9bd23ca8dbad0efe638","sha1":"29bb4bc43ae72986eecb7be1641bffda65eb5aa5","sha256":"582000b51c92a7ce7c4dd0a6e190871c73eae3dc2eada8306f75635fdb2f7b97","sha512":"e7c842fdffa7c64ffa91d884359690440103382edd02f9528c22192ce584f0a41f546174997ac9c309e40cced9326b12e0c069d55cfa59fa828f3bf7c839bbca","ssdeep":"384:Sb2JNVF7BhHJhTU1MoiCjtTsyxbBHCw46tkru:S4F7BhHJhT8jtTsyxVHC760u","tlshash":"6b92d75aec09a46a162321f4f332d651ff7e9086ee038e7075fc12b19f5a99c19296c8","first_seen":"2026-08-05T19:56:21.031463Z","last_seen":"2026-08-05T19:56:21.031463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":0,"dns":4,"connect":27,"send":0,"wait":315,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/arcticmodal/jquery.arcticmodal.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.223Z","timestamp":1785959752223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /arcticmodal/jquery.arcticmodal.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2112\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 01 Apr 2013 14:37:42 GMT\r\nETag: \"17e6-4d94d9035d980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6118,"size_decoded":2416,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (532), with CRLF line terminators","md5":"cef3c1fb1c7f77ae32de5ddecd86f266","sha1":"d77d40d4f82e1c4ded2ba0c4d4d6097307ba76d5","sha256":"7401f047e7a87c22df7f1e1e5413da84bd53b2d5bd6869e6c759325676943d84","sha512":"0a4c002a196bf6b979acca878700744712f4cb425fbd487e6086cda51105f534770ee7eb775f2ffd136c271791d5bf10fa54efced2c84d56a23ec184f536677e","ssdeep":"96:TrlBEiQHg5rr15z8oK4KWaQJE+TfgXwGQJ/NtToYyqhKj9EtsE0JDeL2:FBEiQHMrr15AoK4Ko6wJNtTjyNj9EtsN","tlshash":"ebc1731c7e2f35db90fe3528a02b4a057231b5eaf7164c88f056cd188e69e131471eed","first_seen":"2023-03-07T12:20:53Z","last_seen":"2026-08-05T19:56:21.033575Z","times_seen":446,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":178,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/onion.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-05T19:55:52.232Z","timestamp":1785959752232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/onion.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=cde17fca07f341c96610e32063925a2f; cclastvisit=1785959751; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 05 Aug 2026 19:55:52 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 141\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 10 Aug 2019 23:01:56 GMT\r\nETag: \"cc-58fcb47020100-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204,"size_decoded":442,"mime_type":"text/javascript","magic":"ASCII text","md5":"eb65c6a2b435fde06a5fd63744cb3c6d","sha1":"50b0dc68230396469ff5b15d04488f065b7b6bb5","sha256":"131b5f0f748275cdac97afc45115e32c274091233044bc5633411277c51e58a9","sha512":"eeb20d51d1b8cd084c08a4df20a5a3a145a70ae1c6497c615bb08f67957f8f4a8a9adb7d0b9ea31c047723976bed5f98ad345ca107833bdaa6243232134ab7d2","ssdeep":"","tlshash":"38d0c9db198067513be21203ce53a204357321ef2901a5528d925500b568faf966aadf","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-05T19:56:21.034413Z","times_seen":28,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":260,"dns":0,"connect":27,"send":0,"wait":176,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}