{"report_id":"47c78a10-1bbd-4661-98a2-ef298bee531b","version":0,"status":"done","tags":[],"date":"2026-08-28T13:16:26Z","url":{"schema":"http","addr":"coinomize.click/","fqdn":"coinomize.click","domain":"coinomize.click","tld":"click"},"ip":{"addr":"172.67.147.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"title":"Coinomize — Best Bitcoin Mixer \u0026 Tumbler","dom":{"size":9967,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3075)","md5":"9d96d1c81c26f646946ed1dbb2e629b9","sha1":"1985efc6924a3c3b08146e453cbedb0fc0b2ea19","sha256":"9f61c7459468c64fee80cbd232cbf814c6205c18299ac9090de3f9d598051bfd","sha512":"949faf12d50004cda89eeac7be0150c77f721b0f278a06fa32ccb4f62dc22cfcc3cadfaef494e6abb964edf6eb1a610e2a2e9a821e45f0f8601ac42f845231ec","ssdeep":"192:xvIZ2d9WqTRlJdSJQyPHTP6O7iOHg+2GXkeRKvb4j:JIZotRlJs2kg+2G0eRKvb6","tlshash":"7222b476d115603fb63799c6bab5675e30f2c20ada031944e6fc02b5d3cbdddba22848","dom_hash":"domhash3b5faec77721fb9b9166f418d642b791","first_seen":"2026-08-28T13:16:31.353716Z","last_seen":"2026-08-28T13:16:31.353716Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinomize.click/","fqdn":"coinomize.click","domain":"coinomize.click","tld":"click"},"ip":{"addr":"172.67.147.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:16:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"coinomize.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T13:15:54.441202Z","last_seen":"2026-08-28T13:15:54.441202Z","alert_count":9,"request_count":9,"received_data":200973,"sent_data":5511,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":3,"received_data":131844,"sent_data":1842,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coinomize.click","ip":{"addr":"104.21.28.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T13:16:27.287196Z","last_seen":"2026-08-28T13:16:27.287196Z","alert_count":1,"request_count":1,"received_data":624,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":2,"received_data":37768,"sent_data":1188,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/mix.js","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"419071dd890f57145e02112c6841ca05","sha1":"87dab9bfcc88d5649a12c31b96c7e6b31e3897ac","sha256":"71aa510edc2b0a0fb675c9855f3e72dea9716f3d76c400a4a5ca4c54f2544791","sha512":"ab6a03e0e57c77b4e0d5d0d028ad780831dd05fe8aacbd64f4866fe0cd354ee157bf914dd54fdef8f7fad3f6483077799dff3cbcce5c55465885bfa9d642285b","ssdeep":"768:BCtJbC2arYOG1RNT7Fpkfe+ZYsR/Dvk7kLX:iJnNOGLNT7FpkPZYO/DM7kr","tlshash":"ecc2a3b5a4e7343b7813d0bdd29b460a36f63517a6078114796cf2992fecd209a2c9fc","size":27181,"data":"","first_seen":"2026-08-22T17:44:18.259394Z","last_seen":"2026-08-29T19:20:32.962216Z","times_seen":1641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/livefeed.js?v=4","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8706a0084246a0a2d5911789476bab5c","sha1":"021dbbce326d8ab3488ffa82a237184ec283bc7c","sha256":"1e918b9e490501ef07d725a4d7a6c08cc1e94279b148a281283da83f2bfec808","sha512":"14f6aa8856957632fc629fa9abe84982e9f7683da351c282aae49326948aa507c0b157fa0f4ebbced3f2086382f83ad27d6516c7fe9fc33f523d217d45e8c33a","ssdeep":"96:tpQdFKAYQNcjuVOxVifjKkSZG/PkyPOqkikjaKZDqQICYZ:0cR9Vi2kNnkyB+C/CYZ","tlshash":"faa196957ae32139a523e1a66f9f560c316ce017c05bcd80b64c91685fc9ea407fbeec","size":4794,"data":"","first_seen":"2026-08-12T16:37:41.987423Z","last_seen":"2026-08-29T19:20:32.964535Z","times_seen":1649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"517181793552c431ab45a98010e50c01","sha1":"9909c3469f55471ab6791644c47c802dd25dfb9d","sha256":"eccd7d68d9dd4e5689ef5723da36c3b1fe8631da221d93d7cf38ddc63ab812c8","sha512":"4caafd989f4b25478417f68d049edf2c98caa4310b186101d85bea2f8560aec8873c284f1a5a541f7317d639e7a2f7482efe640de255ef10cf601a3d65575e17","ssdeep":"","tlshash":"0dc02288c822cf0ebc8800c23aba0230b800202a300a0c83eb000caa02af8e3020b02a","size":134,"data":"","first_seen":"2026-08-28T13:15:58.950896Z","last_seen":"2026-08-28T13:16:31.373881Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/wallets.js","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f7db6ca4e9dd5b29f0df6e53848f964","sha1":"436f13d3e75ee17b217d7139909b1019ffcae08d","sha256":"060f5f982fa74e6fe67d88d7d73748725c80fecb42bba8583651e10972c8b540","sha512":"8552d2b7e8761b6ccaf8d55fa4c3224f6be4afd5f05c1ca7d4a22468e0e88f61bee365b1aa8274f99bed32f6bc29bde599f7e5d7affc51f840d8d37549b6a558","ssdeep":"","tlshash":"c431a68816dc24e32a05edc149713c183d8201fedbaf6151332daaeaaff6011ed3814d","size":1533,"data":"","first_seen":"2026-08-12T16:37:41.981687Z","last_seen":"2026-08-29T19:20:32.968495Z","times_seen":1649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/qrcode.min.js","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-08-29T19:25:17.596695Z","times_seen":68493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/mix.css","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.106Z","timestamp":1787922959106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /m/mix.css HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nCookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a323967e690f568f-OSL\r\ncf-cache-status: HIT\r\nage: 33\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"6a875d78-2b00\"\r\nlast-modified: Thu, 20 Aug 2026 20:03:04 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52g6jRMcv1Q0K6BxEmCHCRnV9%2FkED%2BzcgTb8clraZE64GIYHjul%2BI71i6W7X%2BmrFTwoG%2FbQgrRyeO5k55%2FuKM1%2BlFkCuBPubRqk5%2BIb3kPFFd5b0YneDc72n1n4t1RWZRMUR3iTs2IZ36OXkUMLPnwiSwphDyl1MhGYKTE%2FVuXYxzv9IwaSV1iTKTTQRww0%3D\"}]}\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11008,"size_decoded":4659,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b979dbc0f12130729db50d4d40a893e5","sha1":"a4fe20cc1528e7b3feef2530ee1f07e4c4b0e1f2","sha256":"3fe110e10ee9a8ccf2e12da7a2c65e68ae4289edd7d062216e6f5ef536abcb77","sha512":"0e45217e2ccee28180245e79f6c900abe4ba35dd02991e0b034a81f7ee10279b63441cf4e950eed4643d5c684c54af165672ea1cefb1c19afc2eaf4d20d478ca","ssdeep":"96:IaOudEVpKU3gqHJ5XOG/1ia+hL7Enuqw+3ZXUJinHWEro1MODhh5p8+9:7OOEsGNiak7EnjNZkYnYrVh5D","tlshash":"f23252f5b224b176b823e8557789e6ee7540b4038c1397f8f991a124ccc7bf71a60a48","first_seen":"2026-08-12T16:37:41.979901Z","last_seen":"2026-08-29T19:20:32.963975Z","times_seen":1654,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/wallets.js","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.110Z","timestamp":1787922959110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /m/wallets.js HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nCookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a323967e7910568f-OSL\r\ncf-cache-status: HIT\r\nage: 33\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"6a875d78-5fd\"\r\nlast-modified: Thu, 20 Aug 2026 20:03:04 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2Fe2TsO9ulrc30uiGdBGdqeumpAPZSUFTfidJ9MNNtChyDYbWlgZEHJMy9KSa2rL7mbKW9ArzIACYHqZ8HJcahh%2FJCaQnronGSjBCLUBRwjCgyhqFnepI7w%2FFp0sm%2FPlzbIHpGGNet3SfumzBRqekupYfBqOjd28Qt4Vqap5wwvDdVEyIImh0doaixseROM%3D\"}]}\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1533,"size_decoded":1654,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"0f7db6ca4e9dd5b29f0df6e53848f964","sha1":"436f13d3e75ee17b217d7139909b1019ffcae08d","sha256":"060f5f982fa74e6fe67d88d7d73748725c80fecb42bba8583651e10972c8b540","sha512":"8552d2b7e8761b6ccaf8d55fa4c3224f6be4afd5f05c1ca7d4a22468e0e88f61bee365b1aa8274f99bed32f6bc29bde599f7e5d7affc51f840d8d37549b6a558","ssdeep":"","tlshash":"c431a68816dc24e32a05edc149713c183d8201fedbaf6151332daaeaaff6011ed3814d","first_seen":"2026-08-12T16:37:41.981687Z","last_seen":"2026-08-29T19:20:32.968495Z","times_seen":1649,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/mix.js","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.113Z","timestamp":1787922959113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /m/mix.js HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nCookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a323967e7912568f-OSL\r\ncf-cache-status: HIT\r\nage: 33\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"6a876043-6a33\"\r\nlast-modified: Thu, 20 Aug 2026 20:14:59 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVZ3obZYVrIwo89ZoYct%2Fa02UQ4HqarDrntSjySjZgBzzJT%2FHn4NsoVlohAGe1WCuRnsS%2FR1t96fgVBuxYRsUnqCPh6XfIH3OAD%2BK4RDRVTGU6%2BaNCJ2y67pYY%2BEGMeRYL%2F5%2F49ELu3tQ5MIrAvablJN5Bwgy4f03SniBcmyzoXTvr%2BIqUIHeBgxaFezGMA%3D\"}]}\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27187,"size_decoded":10633,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"419071dd890f57145e02112c6841ca05","sha1":"87dab9bfcc88d5649a12c31b96c7e6b31e3897ac","sha256":"71aa510edc2b0a0fb675c9855f3e72dea9716f3d76c400a4a5ca4c54f2544791","sha512":"ab6a03e0e57c77b4e0d5d0d028ad780831dd05fe8aacbd64f4866fe0cd354ee157bf914dd54fdef8f7fad3f6483077799dff3cbcce5c55465885bfa9d642285b","ssdeep":"768:BCtJbC2arYOG1RNT7Fpkfe+ZYsR/Dvk7kLX:iJnNOGLNT7FpkPZYO/DM7kr","tlshash":"ecc2a3b5a4e7343b7813d0bdd29b460a36f63517a6078114796cf2992fecd209a2c9fc","first_seen":"2026-08-22T17:44:18.259394Z","last_seen":"2026-08-29T19:20:32.962216Z","times_seen":1641,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.260Z","timestamp":1787922959260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97101\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-29T19:23:35.656709Z","times_seen":279284,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":18,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinomize.click/","fqdn":"coinomize.click","domain":"coinomize.click","tld":"click"},"ip":{"addr":"104.21.28.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:15:58.438Z","timestamp":1787922958438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinomize.click","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 18:18:51 GMT","end":"Mon, 02 Nov 2026 18:18:50 GMT"},"fingerprint":{"sha1":"D2:33:8C:BA:BA:04:BB:C3:8D:D1:36:EA:0D:86:1C:D1:77:B2:3E:DA","sha256":"F7:23:ED:AD:63:91:6D:9A:CA:A5:48:D1:8C:93:66:CE:3A:C1:1D:02:40:C0:A8:B2:C6:45:6E:E7:F4:C4:41:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinomize.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 28 Aug 2026 13:15:58 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWOedUFEV5GHJnbO7GhesPyCj%2BAkU8n9R%2FbBP6LYfFugc3YPbRLk7SzPij4Cw2uEszEozGgpEZYJdTjM6cwRf9VvPxJS07JGYZrTBFCjuR8BWnicwRy%2BGglHC1VoE7afduk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a323967a6e4823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":4,"connect":20,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"coinomize.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/qrcode.min.js","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.112Z","timestamp":1787922959112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /m/qrcode.min.js HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nCookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a323967e7911568f-OSL\r\ncf-cache-status: HIT\r\nage: 33\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"6a875d78-4dd7\"\r\nlast-modified: Thu, 20 Aug 2026 20:03:04 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksRVgATFjrDQUxmSnsprid9dLv77D2mnYDJAmFyd%2FNjnyf9NUtRIckB%2BgG3Z3re4RExilKE4X6dcUN7bFcEVLOKPUBBhG97jxyfHDGrIeEuOOi5MYKwnPc9uXeHkxPDe0zo2Y5n35M8H6rLvpHW7AYF55QBFMO%2FQmoLBCCKRc9%2FA8PgI8cE0tAnamHTcJpA%3D\"}]}\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19927,"size_decoded":8797,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-08-29T19:25:17.596695Z","times_seen":68493,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.262Z","timestamp":1787922959262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97101\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-29T19:23:35.656709Z","times_seen":279284,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.108Z","timestamp":1787922959108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 13:15:59 GMT\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":2448,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"902507b7a40d993780ab84c27ebef044","sha1":"4574f291820fb61544c68b14d01802021d6a327a","sha256":"968957cbffd47371ce7a70121bee77163b2339821175c66c10b43430f06b1815","sha512":"4f362412abe70cc6a3b966eca467d2c148b35fe4ecb336390ab6834ab0ed1cdb22ef7fbe7e3e7b07d518410c3a74e54f8d94c527f5f2fa181cd3e5a3cd1f4dfa","ssdeep":"384:89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/I:8yjooYhREHPM5svvYaR7AIWP2ZZYQRVq","tlshash":"2da21fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T01:00:52.43846Z","last_seen":"2026-08-28T22:51:12.848142Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":37,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/m/livefeed.js?v=4","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.115Z","timestamp":1787922959115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /m/livefeed.js?v=4 HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nCookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a323967e7915568f-OSL\r\ncf-cache-status: HIT\r\nage: 33\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"6a875d78-12ba\"\r\nlast-modified: Thu, 20 Aug 2026 20:03:04 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9h8RBuycXZtbK68W0OiF4tCoNoZs4bqLL3DoaXlCaoTbzBO5UH7q1HHF2Ag2k4fWg8Gd2Ah39Q%2BL8Uke6DdJppupzj%2BrJty0M0ZPOEsGoRll6FKLvwayiVb5NZEsa%2FGC9PBjBNNp%2BNlnHuvCk5sh%2BgQt1aIPGWycP%2Fxb8EQp7yeZ76uTkphv3HAo95QmV0%3D\"}]}\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4794,"size_decoded":3175,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8706a0084246a0a2d5911789476bab5c","sha1":"021dbbce326d8ab3488ffa82a237184ec283bc7c","sha256":"1e918b9e490501ef07d725a4d7a6c08cc1e94279b148a281283da83f2bfec808","sha512":"14f6aa8856957632fc629fa9abe84982e9f7683da351c282aae49326948aa507c0b157fa0f4ebbced3f2086382f83ad27d6516c7fe9fc33f523d217d45e8c33a","ssdeep":"96:tpQdFKAYQNcjuVOxVifjKkSZG/PkyPOqkikjaKZDqQICYZ:0cR9Vi2kNnkyB+C/CYZ","tlshash":"faa196957ae32139a523e1a66f9f560c316ce017c05bcd80b64c91685fc9ea407fbeec","first_seen":"2026-08-12T16:37:41.987423Z","last_seen":"2026-08-29T19:20:32.964535Z","times_seen":1649,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/img/hero.png","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.121Z","timestamp":1787922959121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /img/hero.png HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nCookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a323967e8917568f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 33\r\ncache-control: max-age=14400\r\netag: \"6a875d78-17e94\"\r\nlast-modified: Thu, 20 Aug 2026 20:03:04 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqibsu0Ffaq2cj7HZY8X24wJseSknzGj2A5jaMzU84u5dDGEysFfzOCueFd10QVpczmZiiatBmwya9hXlqMXvywxFtmdkkxpzVIQOYKZGUlLcJUuzzld55qhGAlhBc4pnyyEo6spWUBjuv7056d6Pb%2F%2BjNiXgiqG7lpaWncxZnTv9ZKDdTE55Tzq2zxm5xA%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 97940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97940,"size_decoded":98827,"mime_type":"image/png","magic":"PNG image data, 600 x 200, 8-bit/color RGB, non-interlaced","md5":"31f2e4075b52091b522b3fcf5ed76495","sha1":"40f2f39ac1b5cde187f3f1c381953a61c813a532","sha256":"6e021cbdb3900f5b95bd570873d2ce159fd2743aa2532869e76e21fe07a71535","sha512":"33d27d9f9a115a0ca76b1bd9926a1c7e987c24af5d852c52c4d14f0d7f92e90e12ea46e19fe289fd0bc253323fcb7ffc649e9eb828308ff63a4e2d89fc9b664c","ssdeep":"1536:h0xLro37s33UFBCqj5JP+CWdNgfmXqYdhO+5xlV35guzDjau46C+amIWJlgGT+em:hR7s0FI6c+eXJDNTVeuH1kHwu+qz","tlshash":"dea30265de468dc2ddb6e5bbe2b350a34110e9bd07a3928e4e9032c536381882efd54e","first_seen":"2026-08-28T13:15:58.926943Z","last_seen":"2026-08-28T13:16:31.366354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Geist+Mono:wght@400;500;600\u0026family=Geist:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.171Z","timestamp":1787922959171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Geist+Mono:wght@400;500;600\u0026family=Geist:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 13:15:59 GMT\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14060,"size_decoded":1559,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06f0db06a6bb7bc7f2b4dbcbc821fd23","sha1":"a6f102e0a80b57a187b31789311024e34746b5c8","sha256":"75340de81455c9ecf14d5a62b1ab673b61c415554cd1ade79c688e4f637fa4bd","sha512":"ff0629644f77d1fb096ecabe391342b0a69c12876771acce3fdbe410f0e5c84a8a6c9c2eef255cad9060296c44a76add96081c9cc242793d81286dd91ffa595b","ssdeep":"192:btrJqotZwtEJZvtqptNJgStH6tOJHBtgogkj3AzktiygLc3AsLtRPguF3AVut4y:Z14+qzs8gYA3IAfEAo","tlshash":"ad52ee91145b9400eb931cc23bcf7f76ae8e60157404d27eabfd08ecacaac26576572d","first_seen":"2026-06-10T04:04:47.939436Z","last_seen":"2026-08-29T19:20:32.967387Z","times_seen":1719,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/favicon-96x96.png?v=3","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.356Z","timestamp":1787922959356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /favicon-96x96.png?v=3 HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nCookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a323967ff9a4568f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 33\r\ncache-control: max-age=14400\r\netag: \"6a875d78-315c\"\r\nlast-modified: Thu, 20 Aug 2026 20:03:04 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ls6n7xcrouJst3yNTqWKUqbGgQdzV82BhUUw0JBlyob6%2BipIIPOgFgQb%2FiZsuKj1gmTvcbGJcccTxOnzDZWKNkNI9P2%2Bk3WJbIkuojzlpN3Z1ChfEdu6c7YNDdUfZ2oWzoil92DzeQMyJU5H%2B6pk60Zslc94HsNWacd%2F6mGcLlURMZqUgLDQgsC%2FDt4tGEQ%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12636,"size_decoded":13533,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"84d9a07e8d03a1a6304f90b19ba6b1a4","sha1":"fd5bfdf51953c3fde852b0ec6646b207831776ab","sha256":"abe019fb02ed9c75680c2357e7843abf407421359941fb96328f9f47d73efdd9","sha512":"f2d7e95eb203648158fd77b4df346d568f243d9ba509739c40ea865208551e6ed8808f2895f43a27f14f5df8093f1ea9043e2aa414c4051085580a94718c008c","ssdeep":"192:+JMp33/sM33uUoUWfg5NRn3gBIm6Fe0F+dV0YNHuSEiC8CXS6v19ipzVy:+sx3CgB3gBIKg+dVTHuqC8X6v2FM","tlshash":"3542b0d05f5305bae00b3593de834e24627376ef7963eb81777851dda3ad2482367880","first_seen":"2026-08-28T13:15:58.930205Z","last_seen":"2026-08-28T13:16:31.370948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:15:58.501Z","timestamp":1787922958501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /?g=g7KqR2xL9mVp8NtWc3Zb5Yf1 HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\npriority: u=0,i\r\ndate: Fri, 28 Aug 2026 13:15:58 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a323967ac8a1568f-OSL\r\ncf-cache-status: DYNAMIC\r\nlast-modified: Thu, 20 Aug 2026 20:03:04 GMT\r\nserver: cloudflare\r\nset-cookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1; Path=/; Max-Age=43200; Secure; SameSite=Lax\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4WUh7%2Bra0l5my8f3xr8i8Axyg2h4HHkJOl08o%2BayipVaXLCwlKff7vt8y%2FcJdDrIkZZIV%2FlFuxSwejNeYulvFuldelkSgTxwGB7m%2B12SvmWtGW0JLMBnMT2gtue%2FfQLVATIG4JItmjU%2Bjf8LbvChu%2FvNZvU4Ad1yvtee0ORu57PfC9RrLCY0tByHucCOcU%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__dg","value":"g7KqR2xL9mVp8NtWc3Zb5Yf1","quoted":false,"path":"/","max_age":43200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dg=g7KqR2xL9mVp8NtWc3Zb5Yf1; Path=/; Max-Age=43200; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5146,"size_decoded":3433,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (384)","md5":"82e2ff1ac59cc2733a30962eac65e69c","sha1":"b07191de88a76930adb430ee08d813c0c105e887","sha256":"a8fd629911a0c8db5cfbaefafb4e40134393be8eecb426dda3734bceaba29a2d","sha512":"67560d02438b7aaece3085f143a67c52c6dc6a51eb6ec0de234f6d4f12c0c31044232d7bcd048f5a58d685fc67fcd65b631d5e28919daf1be4b44fc7d505253c","ssdeep":"96:NvIZV7jXIH96SMqcuRlJdxQKlyPHTPiOO7CzOHGUobo:NvIZ2H9WqTRlJdyAyPHTPzO7iOHCbo","tlshash":"ffb1e97fc505505c36e3c8d3b9b4b38fb026810bd6234c60e6f81687e6d76ee4a62a0c","first_seen":"2026-08-28T13:15:58.937739Z","last_seen":"2026-08-28T13:16:31.372962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":5,"connect":17,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.264Z","timestamp":1787922959264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97101\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-29T19:23:35.656709Z","times_seen":279284,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":26,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/favicon-96x96.png?v=3","fqdn":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","domain":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","tld":"xyz"},"ip":{"addr":"104.21.52.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1","date":"2026-08-28T13:15:59.355Z","timestamp":1787922959355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:31:10 GMT","end":"Wed, 18 Nov 2026 20:29:59 GMT"},"fingerprint":{"sha1":"59:8F:CE:AD:00:6F:60:58:C3:9D:BA:00:82:21:64:03:A0:A4:15:CD","sha256":"AA:FF:0E:88:B6:76:CB:BD:91:0C:7C:2A:B4:91:82:92:13:7E:A8:4D:DE:64:3E:2C:15:E3:E0:B5:25:8D:ED:47"}}},"request":{"raw":"GET /favicon-96x96.png?v=3 HTTP/1.1\r\nHost: c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz/?g=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nCookie: __dg=g7KqR2xL9mVp8NtWc3Zb5Yf1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\ndate: Fri, 28 Aug 2026 13:15:59 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a323967ff9a3568f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 33\r\ncache-control: max-age=14400\r\netag: \"6a875d78-315c\"\r\nlast-modified: Thu, 20 Aug 2026 20:03:04 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkXLNc6bwIhIB0iLVcLcpeQb5DQFicLdAwE%2BhpRruVo1g4jJDgMV7NSt7WFGJrWPUioP2cGFhHCQ28SaT3ZbhYR6PJbQY87u33iUgoSBdlCHeOsD9Kpr2wKY%2B3ODsjqKhD0SwmRqYn3d6Vinna8lxn5j5ye%2BaQU%2Ft7hbjMZY0hFLDNr7sl3nhXDlPwVOMZI%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12636,"size_decoded":13529,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"84d9a07e8d03a1a6304f90b19ba6b1a4","sha1":"fd5bfdf51953c3fde852b0ec6646b207831776ab","sha256":"abe019fb02ed9c75680c2357e7843abf407421359941fb96328f9f47d73efdd9","sha512":"f2d7e95eb203648158fd77b4df346d568f243d9ba509739c40ea865208551e6ed8808f2895f43a27f14f5df8093f1ea9043e2aa414c4051085580a94718c008c","ssdeep":"192:+JMp33/sM33uUoUWfg5NRn3gBIm6Fe0F+dV0YNHuSEiC8CXS6v19ipzVy:+sx3CgB3gBIKg+dVTHuqC8X6v2FM","tlshash":"3542b0d05f5305bae00b3593de834e24627376ef7963eb81777851dda3ad2482367880","first_seen":"2026-08-28T13:15:58.930205Z","last_seen":"2026-08-28T13:16:31.370948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"c01no3zi3q6fszlex3wc3oaf3yxcsmd2g5ymerimfz6j74zc2k3y4ivp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}