{"report_id":"475cff06-8cda-40da-8f0e-7da67cd607c5","version":6,"status":"done","tags":[],"date":"2026-01-24T13:46:40Z","url":{"schema":"https","addr":"deepnode.live","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"172.67.129.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"deepnode.live/","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"title":"DeepNode DIVE Platform","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T08:58:24.820635Z","times_seen":17670069,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"deepnode.live","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"172.67.129.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:46:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"deepnode.live","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T13:46:40.682063Z","last_seen":"2026-01-24T13:46:40.682063Z","alert_count":33,"request_count":11,"received_data":4646431,"sent_data":4921,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"deepnode.live/2b750738-51fc-4bca-b3f2-c0b9bc2c1439","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-01T08:25:22.304715Z","times_seen":5095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/ultratools-3.3.2.min.js","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e1356e084d6b8ac078751b90807adc0","sha1":"75e147bab80047e8116b5250a5cc721f86ec97c0","sha256":"f90492f8fb6020f9a772c06450fda2d62df006bcc10f3342200d6712e4ff85c9","sha512":"66717e7714c38334b03475295dcd7a6ee9d5b0b51c60837b7432c06f742d8fa7b04d7752e42014293fcda0cccad2cb3daa955e12a4ac3971453804ba7c3cafea","ssdeep":"768:y/nAUc9dvJ9rbh/3q6/sDxDadI35OtsrRuUBASBrW9G3i5c66czcjzLcOgcoXcXO:nvJ9/1/UxDadwwsrRhNr9I/+8ss","tlshash":"8d931bd5990bd4e58e1261cdd433ec15e4285963cdacf1a3ba2ceec2785ef62844723b","size":89299,"data":"","first_seen":"2026-01-24T13:41:29.683672Z","last_seen":"2026-02-14T14:47:57.15199Z","times_seen":3360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-02T06:27:33.259351Z","times_seen":1932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-02T06:31:33.15048Z","times_seen":3233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"deepnode.live/bg-main-6.png","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:16.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /bg-main-6.png HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 105476\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\netag: \"696e98df-19c04\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MyJsfr6tSu9GeEdpVvsFq2i9qEcddkPYRxhq%2F0m%2B6X04VwffYNUv%2FbvF3rfP%2B8JTfVzSg5w7HG65w9fiZJUAUouv8kj0QeIn5YGLHlY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff9de3ddab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 675, 8-bit colormap, non-interlaced","md5":"fdfed25f08481a28de4b2e49a423b4df","sha1":"f158dbcb188c19d75eb48903f1df5825b9926018","sha256":"c53cbc542ee1a870f629c3df51323afa7ef6b8be14777a9ce843d337a24ec66c","sha512":"f67d5a6c6cfe75b987b6254113d50fde17edecda902e0ec51b10a2a2f7146bfbd6b0664a512a6d7329eb2dbfee412cb86483c1a8dbcf2fdaa8273d45b5db35a1","ssdeep":"1536:Jwn3kzXVpAyIYGgQZb3afmk8glVlpO21P5FLnIp/IpI5FyuvswrsLbSbuCXnaPlv:83UpAyqgQBCl78yxIiI5Jvprsabtnm","tlshash":"35a312671481f32d405b6d93721329c66fedea4c0cbeff945c8af2f1096da49324a6d8","first_seen":"2026-01-24T13:46:44.598229Z","last_seen":"2026-01-24T13:46:44.598229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/zana-removebg-preview.png","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:16.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /zana-removebg-preview.png HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 901\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\netag: \"696e98df-385\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpLlPDfRYb9yYX%2FeQ8yG%2BmF51E0pxlZnFgHteXvXFk8PjexRiBazmJ%2FKYumF00aReM%2Bu7XEeyn0BFX%2F7Rjx8YesgSYBIPkBTdgrm06U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff9de3de7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"2f9230b50855baf92d9c71cce0b8019c","sha1":"222a9ca9428ba70f3514d4aa6c1f04b45abb3660","sha256":"6cbff30b5597ab8eabadf9579d79316fb02c66a3c73af69b9323e295cf39bca2","sha512":"d8fed5db5e617979c9c39b989f117f5e22a50de73500ec090f0327dc2ea978e2cbc64e27978377177a1249a287f59d914f411e00d4c0780797ab44dfe7296fa9","ssdeep":"","tlshash":"6b11b7f1a68298bb813009b159832cf9cf9f1d989b824716a5388930252764543cf340","first_seen":"2026-01-14T15:23:43.987609Z","last_seen":"2026-02-14T00:54:32.179287Z","times_seen":279,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/favicon-16x16.png","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:17.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 351\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\netag: \"696e98df-15f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eV9ecccfm2asolLzFGaSgoEVLlfO65B8JIbBuWVQWJ6ihOjjCOHCAf7QyjUsB%2Bdah41wfc%2BTgI2h0fzHngivPZCyln%2FQMVDrzBo5Dig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff9e3ac2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c285c5bc6165ee4fe029bc8cef26d63e","sha1":"f7f4634de8ab8aae1766cda2ef21ee96e13a9f41","sha256":"abd62908be89c468b1f881219a7b8c2ef040b4b14dd4c9e1849a558aa953b7a6","sha512":"1e2e2c96bb399ed6d78606b99d04f5f90dc8e9d0372280399b945c184e485b71ace833621229b8b29088486163735d1450fee8ff2b6ed4f252704f29047a6a79","ssdeep":"","tlshash":"cbe0c0c5fa95fff0c44467338ef565086833559707805a10020b04aa7d926c840ec852","first_seen":"2026-01-14T15:23:43.989445Z","last_seen":"2026-03-09T09:15:53.792898Z","times_seen":281,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/secureproxy?e=jscdn/getFile","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:17.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deepnode.live/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://deepnode.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"e13orrm3pju659chffpw\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7NgJ%2BHbmqpTbacSMPjek%2B2MCu2dPVoi38cCeG%2FMBr06XFN1CAImKM4L8MCpskboSaebS5HNggy%2FuBTddoVIyruWTNcrghyxxgwSj5lQKrHPjw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff9e44dd1b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4229999,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0ba6e2ffadded5b760f4243aebf42189","sha1":"24ac18424488b2a9f5574a7daa750269a5734983","sha256":"3abddb03143c5f5ed4c590be401f5bbc726dcbe6db086fb329eb0b0e2c88f3cb","sha512":"a2b6bbff90fb01ee8db18b0831b996c485391e76cf08e05458449e33a8b027a5e2a0a841810b80cd3bb56c1aa5626c3feb2a38866ab834954cc81a43483cb36c","ssdeep":"24576:o8Z2X9AuOUVtIcRgIdoLfIqu3iZy9kqo9BEgv0/pitMdjjoNgEGL0J:okm9oUrIwgIdoUzkyWrEgv0itMdjOgEf","tlshash":"fd2512d3601170d33b20a921b3f1afecd8eb016f6fb6973656d4d88124660598bd9be3","first_seen":"2026-01-24T13:41:29.679075Z","last_seen":"2026-01-24T14:16:44.332481Z","times_seen":23,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:46:15.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:16 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyWb6vuRF0DmcfWR8Rnf6lMlKB%2Fm5vbNboRj3gwP0ysccR3oKQVaf2IH5jEEmDmtbyHTfzOKgvPrF7Skdm5Dc8X6zCOt7m8ZHucwodQ%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ff9d92ffe0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42419,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (14327)","md5":"8497a5b014b8fadc6fd446342bd2094c","sha1":"c503f70364aecb8695740508ef2efdcc24864f49","sha256":"9761bc63851c402bfc447fed7152a923e1b758402c67981947746eb7effc59f0","sha512":"7d3baa0786edb9a8622b28126d0b246e96f756bc8036ceb08de2c9d3216f0e8ef412e637255e2180d1255cece79e0e02d946d2542d07d63f79e00e7451234492","ssdeep":"768:/QX1QXjDoy/L46Cln8uiw/prVgrVREfvZi9vzoCx:4yvJ/Utn8uNprKrv+vZgvzoCx","tlshash":"93135284a5105f762c137ea68bccea1cd11b90d289ef1a9d3ecf404e46c6bd90fb6785","first_seen":"2026-01-24T13:46:44.601605Z","last_seen":"2026-02-14T00:54:32.183608Z","times_seen":278,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":54,"dns":27,"connect":1,"send":0,"wait":278,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/7168ba58516303fb.css","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:16.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /7168ba58516303fb.css HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\netag: W/\"696e98df-8cb3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwxP7oxda2WSukdYP6Z48FmztZRp%2FRmU3rElwNjp5ilJXRA4ztzOilHuDP4B8MFoFbJzgFpTrCIfewy1xeAzyTPV0Ow3ddanlkNV2VQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff9de2dbdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36019,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36019), with no line terminators","md5":"978ae205c807e51d471cfaa3654d6b1a","sha1":"d4b6dd846f28236c28db5d8591db05432d03fc67","sha256":"aa621dd8c61adcb8d699a181c00ffb975d32033beefe97cc76594c98d125b8f4","sha512":"74ee69891176fbf50d66a790d070a81c427901d91bbd9e68ad693cb019749a43d38378085879bdc8bca83b8343c120cf124cb31a34c1c828534b7e0bb78dd3d6","ssdeep":"768:4IJQaPwhKBwDNC2dsOubx1rSUpSn+E5gdktq32U2:ARpdsxTpSn+E5gdktq32X","tlshash":"3ef28464f661a13e7dbb993f22c8977e6114dd039d1a1beebb51a04075d3ffa029220c","first_seen":"2026-01-24T13:46:44.602414Z","last_seen":"2026-02-14T00:54:32.178195Z","times_seen":278,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/aab9591df53961c6.css","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:16.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /aab9591df53961c6.css HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\netag: W/\"696e98df-97d4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svQSUEpRWYpS1Bkfc9E9neP7WwEiuPkajYnB0uenCUYRdJ6Iuy9RmTrEbijEEomY5xMSjgCkq0GZXbcxv4KlElM406%2BthuZHZuANhOA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff9de2db3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38868,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16212)","md5":"cd300d9b73c3381a12327494a07b6631","sha1":"5f7aa02e5f6ef566db474402948c454bc5475222","sha256":"b6ea3c1aec7ff9f66ee51d7e5b1939ddad7f5841675a7edeb8a17477e3cb273d","sha512":"6183e20e97d3207d7e00c4edda0b669db9afaa0ba88a8831e573c158247ed4049d3360ec284e7f202a8185aef2d66043b926309cb4f7623ff2850c32539e1f3d","ssdeep":"768:pJbx1rSKSSxVRMX170AJ2Y9C89//mgvK29pRZgoS:ppPSSxVRMX170ApjBZi","tlshash":"e50373dcf180f63e3e37e46a630e855ea110aa458d525feffa02d1d01ac7bf70296219","first_seen":"2026-01-24T13:46:44.603264Z","last_seen":"2026-02-14T00:54:32.175668Z","times_seen":278,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/44af103fbd72fc77.css","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:16.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /44af103fbd72fc77.css HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\netag: W/\"696e98df-ca30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zn7S9q9mCY2E74K4DjdVQx7UNjzpeO6W8E2VZ4SdhVQg2KM8%2FWlOJgX3pwMkjAlGD9SfVlEhUnY5Yw2oZYTFJCIYj6MgPTQ2qZ9vq3s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff9de2dbab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51760,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51760), with no line terminators","md5":"d5eeaee006499e45073b75f0abf98b8c","sha1":"e3dcbd423f862074b2783d7ee8b8c9758b270950","sha256":"b140dcb82f14c79761e6d30dee1a950903a3e9b6c3e7ba2558dc5eb79733f462","sha512":"370af3cf28adcc411a02527d0f87dfce922c7e5e0103913a50c72fc31a589fbdbd515bb594aa0de4fcf842324ff75ebb72147b224385be4e95c068cec61a5f87","ssdeep":"768:QYNtR66BCIT9TFRIItXilnTs6uWoHjFyibcRPEWMjLUw2:QatR66vT9TSuWuUw2","tlshash":"f4337564f2a5d97fbc2374fea3acf41c6209b086de2557ecfa52610253c76f61863a10","first_seen":"2026-01-24T13:46:44.604203Z","last_seen":"2026-02-14T00:54:32.177062Z","times_seen":278,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/ultratools-3.3.2.min.js","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:16.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /ultratools-3.3.2.min.js HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\netag: W/\"696e98df-15cd3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MmNgMYy3wVUo8oemzThiPvGRQ25M7wyXi7rUp99H6k6463hE%2By922M9yce1vh%2Fzp24GV4x%2F2GoTvMP8q3W5GuplWcWoc9ocxEFNtuPw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff9de3dd3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89299,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0e1356e084d6b8ac078751b90807adc0","sha1":"75e147bab80047e8116b5250a5cc721f86ec97c0","sha256":"f90492f8fb6020f9a772c06450fda2d62df006bcc10f3342200d6712e4ff85c9","sha512":"66717e7714c38334b03475295dcd7a6ee9d5b0b51c60837b7432c06f742d8fa7b04d7752e42014293fcda0cccad2cb3daa955e12a4ac3971453804ba7c3cafea","ssdeep":"768:y/nAUc9dvJ9rbh/3q6/sDxDadI35OtsrRuUBASBrW9G3i5c66czcjzLcOgcoXcXO:nvJ9/1/UxDadwwsrRhNr9I/+8ss","tlshash":"8d931bd5990bd4e58e1261cdd433ec15e4285963cdacf1a3ba2ceec2785ef62844723b","first_seen":"2026-01-24T13:41:29.683672Z","last_seen":"2026-02-14T14:47:57.15199Z","times_seen":3360,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/gateway.svg","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:16.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /gateway.svg HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:16 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lCGmZTxqaeXkDBNmasNTPITziuufGTj7GiTabCc2acNj5P7YSVW53s%2FlX0pyOU9QxCbr6Na3rmuiVnZEc5xVTnHN%2BrjY76dB8w0Ey38%3D\"}]}\r\netag: W/\"696e98df-26d\"\r\ncontent-encoding: br\r\ncf-ray: 9c2ff9de3deeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee7898ff4a8eb9e9c572ce2e2eaebc2e","sha1":"df5b61d38725dd3ea4b41e4a70fdc3fa2b3099ae","sha256":"51e73905e25c67b79c74e235c31ee427878bc0affcc35d64fef82913d645939d","sha512":"6a519091420a8f9bafc11d6033a9d1d8c3f10159b4eabd86aa2d66ce897e0e6480fc29f9127efd12c46ecdc4ebf9fa7817847abbe8d31cb1b81f36eb31ffe4a2","ssdeep":"","tlshash":"d6f0789472e48102a8006f206f5e353d217331f683108ec589c07e35d98a99f4e74ed0","first_seen":"2026-01-14T15:23:44.010799Z","last_seen":"2026-02-14T00:54:32.182686Z","times_seen":279,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deepnode.live/android-chrome-512x512.png","fqdn":"deepnode.live","domain":"deepnode.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deepnode.live/","date":"2026-01-24T13:46:17.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deepnode.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:45:38 GMT","end":"Sun, 19 Apr 2026 20:44:05 GMT"},"fingerprint":{"sha1":"0F:F0:B9:26:94:CF:60:BC:9C:6B:DC:00:A9:74:BD:EC:D1:69:10:6D","sha256":"95:F6:40:96:80:20:0F:68:9C:1B:D8:EA:F4:77:EC:10:4C:7C:AC:69:3A:70:67:86:84:EA:B9:E2:8C:F2:5B:EB"}}},"request":{"raw":"GET /android-chrome-512x512.png HTTP/1.1\r\nHost: deepnode.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deepnode.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:46:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 40345\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 20:49:35 GMT\r\netag: \"696e98df-9d99\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIQa6%2FR%2F0bbuZHO8JJm%2FYfVR0z4LavVoPrOwPzr2xPGKn4teoCLVte%2F1qxZ6EH2y%2F7Ffm1yED1Cz7aamr8%2BjI3LfmkPfJuSy63BngPw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2ff9e38beab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40345,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b873c58dacf65fbad07ce5c78d35733d","sha1":"12befc7e003db126058c52141edc158629755499","sha256":"3833eccc1f7e9dc67dc286ceb627f5cf21f8653a799b14b52e0c1007072fcea5","sha512":"2a1c9e453d2b347238f11bdb3e54c5b07a117880ce855e7288906c2a062c8ea60aca638d6b191e392077587595aef20377542be1eda5b1536bbc9f1d0f96290a","ssdeep":"768:LXfJJB8Wv+Hfi/osaNQA+O07aLnNuMmrcHE8C28NTWVhCLMc902ffnD+cOfqTpUA:LXfryW2/cod0sNuMmwNC2TqL10KrCRA","tlshash":"dd03d009e19db2da9c313d985e5d0b0483e6c1bd61d5bfb1cf1a1c2586c8b39cae7942","first_seen":"2026-01-14T15:23:44.006388Z","last_seen":"2026-03-09T09:15:53.793824Z","times_seen":281,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"deepnode.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}