{"report_id":"47db3230-8fe5-4091-8f8d-f8b3f0b5559c","version":6,"status":"done","tags":[],"date":"2024-12-12T05:18:43Z","url":{"schema":"http","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":0,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"title":"underground-revolution.eu"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-02-20T05:18:43Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"underground-revolution.eu","ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2015-12-27T21:01:26Z","last_seen":"2024-11-27T22:28:36.547111Z","alert_count":0,"request_count":5,"received_data":21324,"sent_data":2829,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":0,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2024-12-11T02:22:28.259802Z","alert_count":0,"request_count":4,"received_data":59576,"sent_data":3585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2024-12-11T01:37:43.068461Z","alert_count":0,"request_count":1,"received_data":54936,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"obseu.netgreencolumn.com","ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-01","domain_rank":0,"first_seen":"2023-10-21T11:47:34Z","last_seen":"2024-12-10T13:33:56.535456Z","alert_count":0,"request_count":6,"received_data":5152,"sent_data":8947,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2024-12-11T02:22:32.640753Z","alert_count":0,"request_count":2,"received_data":2085,"sent_data":977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"euob.netgreencolumn.com","ip":{"addr":"3.164.240.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2022-08-01","domain_rank":0,"first_seen":"2023-10-21T11:52:48Z","last_seen":"2024-12-10T13:33:56.516384Z","alert_count":0,"request_count":1,"received_data":39393,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d38psrni17bvxu.cloudfront.net","ip":{"addr":"54.230.241.226","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-09-22T18:48:38Z","last_seen":"2024-12-11T06:06:20.33125Z","alert_count":0,"request_count":2,"received_data":23792,"sent_data":1026,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-12-12T05:18:19Z","timestamp":1733980699,"ip_dst":{"addr":"172.18.0.17","port":34810,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2024-12-12T05:18:19.583679+0000\",\"flow_id\":756384309915734,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.75.69.192\",\"src_port\":443,\"dest_ip\":\"172.18.0.17\",\"dest_port\":34810,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.netgreencolumn.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:91:A3:1C:BD:BA:61:63:8D:76:FD:F0:30:FD:61:2B:B9\",\"fingerprint\":\"06:6d:6d:cb:aa:fc:45:6a:5b:7e:7b:bb:47:17:86:5d:51:0d:a9:08\",\"sni\":\"obseu.netgreencolumn.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2024-10-28T00:00:00\",\"notafter\":\"2025-01-26T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1217,\"bytes_toclient\":3925,\"start\":\"2024-12-12T05:18:19.471126+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4ba8153d3265efbddedc99100d08bca","sha1":"6ac78d1aaf778711782abd5492a82af5b46ebcf9","sha256":"c6acd35b54a6f0913ae32806a0c4bbf2f0565a86b367dfdf15ad6a2ae9f9b58a","sha512":"872362061b18f81c7acba87785f1e5751f10ab15e20489df8005567591c41202d937ce7069b3a322c2008488db8f75ab4fa9b28f253199ec67d18535d5357de3","ssdeep":"1536:SLC7zoXSeUpynbGbPTAbqX1Fv13Xi1AUTUdE5QJQ5mgClepNofXq44S+6mHGFqHJ:7Xp3XidcQ5+o4zlxieKH","tlshash":"bce35d9d73a1702253a390f4607f028fb13af965e80888b4b199c8e47db4d995277fbd","size":146910,"data":"","first_seen":"2024-12-06T10:38:08.631789Z","last_seen":"2024-12-12T08:59:13.417412Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2ad26f15fdaf8518ca64c8ac0e4a8c3","sha1":"2f3221804a31f41ec73e392ceb10add72687e728","sha256":"7ceaea82e86f715bed931de3aad51ca29645cb52f0847db83ed3679c2b5be3cc","sha512":"964e87b4117560ce783313e9a88d79b2abc9a78ccfbf2fba9606c6dcc97b8815171c8b3b56ffb5d37f928d533af64a43a1ec734dc1ba264a6706c30a6a2d447b","ssdeep":"1536:WLC7zoXSeUpynbGbPTAbqX1Fv13Xi1AUTUdE5QJQ5mgClepNofXq44S+6mHGFqHJ:nXp3XidcQ5+o4zlxieKH","tlshash":"e0e35d9d73a1702253a390f4607f028fb13af965e80888b4b199c8e47db4d995277fbd","size":146899,"data":"","first_seen":"2024-12-05T21:19:00.458613Z","last_seen":"2024-12-12T18:40:32.362438Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c77554570ae0fa8e4fb31747dc213058","sha1":"e989fbde07e6a68975c7a31e1d4df76afd90b96f","sha256":"c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77","sha512":"130189a67dea3f0d7ba0591ffbff46f37993ae8b07409e84dfb571f6d31f1b20f97cf76b7cd0751450eec5f294906f95fd35f3dfa37d58bc80433f4c9b4064a9","ssdeep":"","tlshash":"171148b58c9b942f6b37592fa69a72816c41a1179c013a18b14cc7302fdc71d6470bf6","size":968,"data":"","first_seen":"2023-03-08T02:24:08Z","last_seen":"2026-01-15T16:13:58.011798Z","times_seen":181951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e89c6b4e1eacd536fc0fcc58bfe00d4f","sha1":"a3249afa2e049e0e26d6af6d7a7832b9c8df8c74","sha256":"89f1fe1d751156d05d265cc954a487ed71ba7475a43b705a0f3917ac85395b09","sha512":"9977aa9be9f07ba347f235b86a08a0a04556f1090f2d0d0a1f396ee8f7d0352ee1eefbc68bbe87943e00da3a54dc62f5d568f7851a2eb9fe3507bced8a9fb28f","ssdeep":"192:+TW7P88VCV26EHi3DCtkraarTedWDg2VpIa3pig:TEgA26EHeDCtkGarTqWUapig","tlshash":"c0f1e6b2954218374eef321eeeb7a50ae89dfa1778372433f55bc6d0235080e95613b8","size":7968,"data":"","first_seen":"2024-12-12T05:18:44.859923Z","last_seen":"2024-12-12T05:18:44.859923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.netgreencolumn.com/ct?id=77721\u0026url=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt\u0026sf=0\u0026tpi=\u0026ch=landingpage\u0026uvid=115\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1733980699450\u0026hl=2\u0026op=0\u0026ag=718972423\u0026rand=03561971191072672695829117879981515297160982020286286508110670761076812829089238015809\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=XMu4lBUxjr\u0026pto=1164\u0026ver=62\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1733980699.esyrad6MsYEVSvLo\u0026suid=1.1733980699.QJB5TARIbSWExcy2\u0026tuid=1.1733980699.44ZHudB8dxuZNt2i\u0026fbc=-\u0026gtm=-\u0026it=10%2C638%2C79\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi17c2w2Lj5JZGlhbmh%2FLjk7RGlhbmh%2FLj5P","fqdn":"obseu.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"31d14cbce2f0b15831c8f15433985f89","sha1":"8f5303cdc3eac643508eb4914e0d4a2d2fdabde2","sha256":"38d6dcf9527cf8242a3102142eedd78d27ac17b031f6d526811afe40d6c3db78","sha512":"dd8f8056ca537d1490c479ab07b4cc27644b3d3f13c90fa89133bd951c0b290e9176b62e6a3ac21a0ead4afbd065df9adf8d938934f77aa406f70eb7019e62a5","ssdeep":"","tlshash":"2961d96a65dadef857b982bafdb43ef077e35df756cb801e00934e43024a2183e40544","size":3257,"data":"","first_seen":"2024-12-12T05:18:44.862578Z","last_seen":"2024-12-12T05:18:44.862578Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"480ce99c865abbb831a26f981497f59a","sha1":"6eacd680de3853074cfbb689c3397264e55462d2","sha256":"f01140fb973bd64a71254ebc7462064590c8365d19853b5f8b18b885e4ea5614","sha512":"7b3c794cc3f0369dc728ee9f1cef0bb1dc47f09005157b2f061011cf8487e3e055211cb7d041a8ed684101bd10a3a817e4004dbcf49815e3561f9789419c4019","ssdeep":"","tlshash":"09018b441ce430f4864375b94e4fc4197a3894171a198e647b2c63c46f95539c7aefe9","size":669,"data":"","first_seen":"2024-12-12T05:18:44.864432Z","last_seen":"2024-12-12T05:18:44.864432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.netgreencolumn.com/sxp/i/c4601e5f6cdd73216cafdd5af209201c.js","fqdn":"euob.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"3.164.240.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4966373d86050828c2631f3235776615","sha1":"d382d5bac070f6e4f049f11eafefad07e302fe05","sha256":"43bf01c123fb552e947b635d02c1ee61c394ed9b7d4bd4f9e499d7a5a4f50e87","sha512":"9694eaa3378ea23d3798558663354d0914766724fcc1090df9eff1fd23054efa56513cc35c9f5b979cc36790ca74baf7999017253dec8bd535a5225e0b0d28bc","ssdeep":"1536:ub5Uv0wPaM56w1E1FL6/9YHjrx4ziYtCRl69JLtaLBrDgfnH1OBeFWySrbyqEcu7:nVT1+HjiPsLBw5XSCb/","tlshash":"40a3d8ddb2e2703943932465107f410ae27b5e542c4b8294d6bee9d5bc78e8e503bfac","size":106505,"data":"","first_seen":"2024-12-10T13:33:58.617206Z","last_seen":"2024-12-18T11:25:33.669676Z","times_seen":2557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003%2Cbucket077\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Funderground-revolution.eu%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1YTcyMWFhYWZjY3x8fDE3MzM5ODA2OTguNzI5OXw3OWYxYzA3NjYwNjliZTcyN2UxNzIxZTNkOGNlOTVkNGFiZTg4ZTUxfGlwbWFya2V0aW5nLnRwbHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwxMGI3ZmUyYzYwMTAwYzViMDA1OTRlZGUwMGMyMzhjNzIyNWIyYTA3fDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2767882553095168\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301547%2C17301266%2C72717107%2C49280903%2C72771954\u0026format=r3%7Cs\u0026nocache=6451733980699371\u0026num=0\u0026output=afd_ads\u0026domain_name=underground-revolution.eu\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1733980699373\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=696\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=702325170\u0026rurl=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6de66260044448e821488048da895fee","sha1":"3b3487d0a507c0a981b699e2ef081a1b8d105368","sha256":"83fa6970b1bd32110dd946c7a6823ad1dacd89793a6511645e8d54117e7c6e81","sha512":"c50d02a83fb3db0aaee7f00343c6ad1ae903809fb1401ac7b9927821c237de5d9f475c48efbd0aaf6ae83ca3040f21e37bf544358775fda9ba5bbd11f9da2710","ssdeep":"","tlshash":"051123964c740a21cc53255519973f93589c153123c77580e48eb88f30befefa51d15f","size":871,"data":"","first_seen":"2024-12-12T05:18:44.866181Z","last_seen":"2024-12-12T05:18:44.866181Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"53d0dd97ba61304ca54789b815e61272","sha1":"6c736ccfa75ef3781c16c50a7734b7e48e13627b","sha256":"bf501fe693bbbfdd3cc98546a1aad9f6111ac826f59ef1ee37da5101497dc9b7","sha512":"93f5b822a6985e8391db74dda8496758bf81bb2a94653741ce036753db62cdcc012ef4794156d6ab2bd613be0bda33f50489f68743d196edd04183ea684256df","ssdeep":"","tlshash":"06900450047103470d430054554c5051cc35d5151751413d137344730351c30d011405","size":40,"data":"","first_seen":"2024-05-06T14:00:02Z","last_seen":"2025-09-14T05:32:32.130972Z","times_seen":28583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"18f2edc58d8a7b9e6b82454e8658c157","sha1":"e5dfdd0fa61b3a5ef68dab382a0ba93e9e7b67fb","sha256":"2d9b07a0704d92dda4deae88bc582aeb659923c8d44d0e7362e13cb28d88d250","sha512":"21505594429d2550843f79a1b5aa1555f5f9cac9ae8c281ab5cf48bb5831e39075e826ce61837ad3d6a7ad9a1fb227963eae6e2186b388c9af611e35a0f46f92","ssdeep":"","tlshash":"88f0659805f622d326aa60584df6eb0375a09023a20555c4fa7ca3119f5bc5702ddb8a","size":483,"data":"","first_seen":"2024-01-04T10:26:15Z","last_seen":"2026-01-15T16:13:58.022487Z","times_seen":185093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b334e0123cf0cb113092022fb726782","sha1":"45abb42a6680499daa10d83d2859329de1843de2","sha256":"42591f96b9a41a7e2e5ecd0240dd7fecdcf03ef8454b57c68f08697474a4b579","sha512":"867e061d0f593815a87259d55d960e2000b776954b080157deabbf46850d7530b770d3d31abf6b901aee50bed5fa395be2ce4a6a075b703d07ff7c7c7b7d5cf6","ssdeep":"","tlshash":"6290040115134057505d05134375c101d5504c3f5005d531751c07435f1045f170075c","size":50,"data":"","first_seen":"2024-01-04T10:26:15Z","last_seen":"2026-01-15T16:13:58.023216Z","times_seen":184974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-03T23:31:33.403113Z","times_seen":352088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-03T23:31:33.411731Z","times_seen":331476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-03T23:31:33.410283Z","times_seen":331430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-03T23:31:33.411013Z","times_seen":331530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null},"http":[{"url":{"schema":"https","addr":"euob.netgreencolumn.com/sxp/i/c4601e5f6cdd73216cafdd5af209201c.js","fqdn":"euob.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"3.164.240.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:18.961Z","timestamp":1733980698961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netgreencolumn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 18 Jun 2024 00:00:00 GMT","end":"Thu, 17 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"37:0F:62:6F:89:67:64:A4:86:1E:1B:D0:1E:E4:8C:2D:D5:7E:D4:0B","sha256":"61:19:D2:B9:EF:5E:13:F7:19:A2:DA:23:CA:67:DA:2C:24:03:A1:B9:D5:33:29:8A:0F:5A:36:B5:C3:83:50:86"}}},"request":{"raw":"GET /sxp/i/c4601e5f6cdd73216cafdd5af209201c.js HTTP/1.1\r\nHost: euob.netgreencolumn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 38869\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ncache-control: max-age=43200\r\ndate: Wed, 11 Dec 2024 23:36:38 GMT\r\nexpires: Thu, 12 Dec 2024 11:36:38 GMT\r\netag: \"1a009-04LVusBw9uTwSfEer++tB+MC/gU\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 29094763caaadfcf0f94a0905a4ca74c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: VgzyvlK1YJme1DzGdwrVVto6CRzMC03paC4igohHtGvjokaDVxSVuQ==\r\nage: 20500\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38869,"size_decoded":106505,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"4966373d86050828c2631f3235776615","sha1":"d382d5bac070f6e4f049f11eafefad07e302fe05","sha256":"43bf01c123fb552e947b635d02c1ee61c394ed9b7d4bd4f9e499d7a5a4f50e87","sha512":"9694eaa3378ea23d3798558663354d0914766724fcc1090df9eff1fd23054efa56513cc35c9f5b979cc36790ca74baf7999017253dec8bd535a5225e0b0d28bc","ssdeep":"1536:ub5Uv0wPaM56w1E1FL6/9YHjrx4ziYtCRl69JLtaLBrDgfnH1OBeFWySrbyqEcu7:nVT1+HjiPsLBw5XSCb/","tlshash":"40a3d8ddb2e2703943932465107f410ae27b5e542c4b8294d6bee9d5bc78e8e503bfac","first_seen":"2024-12-10T13:33:58.617206Z","last_seen":"2024-12-18T11:25:33.669676Z","times_seen":2557,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":24,"dns":1,"connect":9,"send":0,"wait":10,"receive":8,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d38psrni17bvxu.cloudfront.net/fonts/Port_Lligat_Slab/latin.woff2","fqdn":"d38psrni17bvxu.cloudfront.net","domain":"d38psrni17bvxu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.226","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.072Z","timestamp":1733980699072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Thu, 03 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62","sha256":"41:BA:3A:6D:EE:23:CF:F9:B5:B7:FA:8C:6F:F5:D9:E5:89:D2:DD:DA:17:35:5C:E8:15:8F:DA:8E:2A:C8:5C:5E"}}},"request":{"raw":"GET /fonts/Port_Lligat_Slab/latin.woff2 HTTP/1.1\r\nHost: d38psrni17bvxu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://underground-revolution.eu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 11460\r\nserver: nginx\r\nlast-modified: Thu, 21 Mar 2024 11:48:11 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 12 Dec 2024 04:45:47 GMT\r\netag: \"65fc1e7b-2cc4\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: QBuHS4N3GIMW85KFUzGSpGBwMWoj5FGCHhB6AYbtpbG2RI8W_82L9w==\r\nage: 6524\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11460,"size_decoded":11460,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11460, version 1.0","md5":"530281ca203b403ba954d0652eb4072f","sha1":"51a62f96562ff94b45a02aee4476abb3518da3bd","sha256":"b938a950c28b1cec409f935d79a2faadd658bb6a461ca3ee8e2f6e2d716511f5","sha512":"30f8569a091a2007b47aa25bbe04aef663e2f6d161363a4d9fd696a913e7135fe42b6a5cf8d732be316ee82c9d53f3dea0daf37230ee0288e32827e2fd6051df","ssdeep":"192:gcKmVlpfcVl69G2Tpf6yqgkPlNRYpN/JtQEm7BjgwNti+x7fOe8gtu6gyx1HpNOn:gcpq49GKf6yqgaYNBeNU+xSlgtu6bbhy","tlshash":"4a32bfa70f8582faca4818bcc8d434779f7dcc9810d63a79b55c6f2c9d03a8c4b9ca50","first_seen":"2023-12-21T01:05:52Z","last_seen":"2025-11-13T05:30:26.295611Z","times_seen":7334,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":2,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png","fqdn":"d38psrni17bvxu.cloudfront.net","domain":"d38psrni17bvxu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.226","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.135Z","timestamp":1733980699135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Thu, 03 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62","sha256":"41:BA:3A:6D:EE:23:CF:F9:B5:B7:FA:8C:6F:F5:D9:E5:89:D2:DD:DA:17:35:5C:E8:15:8F:DA:8E:2A:C8:5C:5E"}}},"request":{"raw":"GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1\r\nHost: d38psrni17bvxu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 11375\r\nserver: nginx\r\ndate: Wed, 11 Dec 2024 11:04:57 GMT\r\nlast-modified: Thu, 21 Mar 2024 11:48:11 GMT\r\naccept-ranges: bytes\r\netag: \"65fc1e7b-2c6f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: dHwYobYHjsSw_u5b4OvrVNwOvvh-TQYB7NsGEzc2tvJkDFqR7jYpSA==\r\nage: 65602\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11375,"size_decoded":11375,"mime_type":"image/png","magic":"PNG image data, 1500 x 600, 8-bit colormap, non-interlaced","md5":"0cb2e5165dc9324eb462199f04e1ffa9","sha1":"9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8","sha256":"67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865","sha512":"7a285c4a87b9f9093b7ba720d8fe08e0ad7e2ebde9ef8c8d11b70afa08245af8f8a7281c7b3fbe8bad21c3afde4f32634d3bd416822892aa47ba82c12f4b8191","ssdeep":"192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/","tlshash":"94329f86e207c9addc119cb16bd8e9384c673cc3c66925b748987669e4bb80475f049f","first_seen":"2023-04-05T14:20:44Z","last_seen":"2026-04-02T01:33:43.563834Z","times_seen":205145,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":5,"dns":1,"connect":1,"send":0,"wait":1,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/favicon.ico","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.142Z","timestamp":1733980699142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"underground-revolution.eu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Oct 2024 23:29:07 GMT","end":"Wed, 01 Jan 2025 23:29:06 GMT"},"fingerprint":{"sha1":"89:C1:E0:DE:72:33:6A:84:DD:D4:CE:0E:B0:63:1A:4C:54:EE:51:D9","sha256":"24:87:F9:08:B6:79:D1:54:33:73:78:7B:85:5C:B3:E8:9E:B8:17:4D:ED:A1:87:61:63:E3:47:C6:54:80:18:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: underground-revolution.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/hacked/Misc.txt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: image/x-icon\r\ndate: Thu, 12 Dec 2024 05:18:19 GMT\r\netag: \"67583c07-0\"\r\nlast-modified: Tue, 10 Dec 2024 13:03:03 GMT\r\nserver: Caddy, nginx\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003%2Cbucket077\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Funderground-revolution.eu%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1YTcyMWFhYWZjY3x8fDE3MzM5ODA2OTguNzI5OXw3OWYxYzA3NjYwNjliZTcyN2UxNzIxZTNkOGNlOTVkNGFiZTg4ZTUxfGlwbWFya2V0aW5nLnRwbHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwxMGI3ZmUyYzYwMTAwYzViMDA1OTRlZGUwMGMyMzhjNzIyNWIyYTA3fDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2767882553095168\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301547%2C17301266%2C72717107%2C49280903%2C72771954\u0026format=r3%7Cs\u0026nocache=6451733980699371\u0026num=0\u0026output=afd_ads\u0026domain_name=underground-revolution.eu\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1733980699373\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=696\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=702325170\u0026rurl=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.382Z","timestamp":1733980699382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Nov 2024 08:40:55 GMT","end":"Mon, 27 Jan 2025 08:40:54 GMT"},"fingerprint":{"sha1":"58:3D:9C:C1:AD:FF:DB:76:C6:A2:47:40:3C:B0:40:4D:0E:9E:28:A8","sha256":"69:D9:6C:DB:46:5A:19:55:4D:FB:C8:DE:8B:3B:B1:3D:83:91:2A:86:1A:D4:EC:47:AE:C9:B2:2D:B1:AE:C3:E3"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003%2Cbucket077\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Funderground-revolution.eu%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1YTcyMWFhYWZjY3x8fDE3MzM5ODA2OTguNzI5OXw3OWYxYzA3NjYwNjliZTcyN2UxNzIxZTNkOGNlOTVkNGFiZTg4ZTUxfGlwbWFya2V0aW5nLnRwbHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwxMGI3ZmUyYzYwMTAwYzViMDA1OTRlZGUwMGMyMzhjNzIyNWIyYTA3fDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2767882553095168\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301547%2C17301266%2C72717107%2C49280903%2C72771954\u0026format=r3%7Cs\u0026nocache=6451733980699371\u0026num=0\u0026output=afd_ads\u0026domain_name=underground-revolution.eu\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1733980699373\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=696\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=702325170\u0026rurl=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Thu, 12 Dec 2024 05:18:19 GMT\r\nexpires: Thu, 12 Dec 2024 05:18:19 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-2A_ZFag-e2WgTD_1TVcn6A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 3255\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3255,"size_decoded":15189,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14372)","md5":"843ab2fa5d04b46da0ad95c9cdaf4ac8","sha1":"fdf6aa0210014a4a8cbc5dc47961cd3872035882","sha256":"41a725f0b18e18b22a56536a40329bb4fdae9a646b3cb54272da43f6c0de2496","sha512":"19e1f07ebaeb870ee602309235a17579e8d1206503a1e703f7d3197cd3d3c6c54a5c189e71db26b16e0847ded10a2848c9b6e933154e1f8dfa1647ea5df15096","ssdeep":"192:GE12iMpgbLLgh3VLWr2FRQFpSDF68sUKVtkp:Gni0d3hZcN8sUK/kp","tlshash":"1d62563760a1272d1907ac541b666f5ec181d43ac46b31e988f35f25c7ebf828fe628d","first_seen":"2024-12-12T05:18:44.837203Z","last_seen":"2024-12-12T05:18:44.837203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":64,"dns":1,"connect":9,"send":0,"wait":103,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.133Z","timestamp":1733980699133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Nov 2024 08:39:37 GMT","end":"Mon, 27 Jan 2025 08:39:36 GMT"},"fingerprint":{"sha1":"C1:EF:1D:9F:32:BB:31:2D:F3:08:D9:D6:97:9C:21:A1:A2:67:F9:C5","sha256":"42:C2:CD:42:C2:36:C1:98:B7:7E:01:7F:1A:59:E6:82:17:91:7B:9C:D9:CE:27:49:D4:1D:6B:06:D4:40:FA:E9"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026adsdeli=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Thu, 12 Dec 2024 05:18:19 GMT\r\nexpires: Thu, 12 Dec 2024 05:18:19 GMT\r\ncache-control: private, max-age=3600\r\netag: \"17851870763966219436\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54221,"size_decoded":150167,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1932)","md5":"3661fd1ec596858dd7293718fea0e25d","sha1":"cb11b41471e68dd37b8e70f29006f7ae5bf933db","sha256":"a48c8f328fb7e7a1b1796b645d12e7133f9a0c78a405756fc215f01214a0f264","sha512":"f15a570fd8c2d0093b8256bf9096a292ac645dba795014dd9f831e5380364c2d769730d77d16a471535dde94a019aeb8a18be697aa1d35fece0e74863556e7b7","ssdeep":"1536:SLC7zoXSeUpynbGbPTAbqX1Fv13Xi1AUTUdE5QJQ5mgClepNofXq44S+6mHGFqHn:7Xp3XidcQ5+o4zlxieKx","tlshash":"19e35d9d73a1742253a390f4607f128fb136f966e80888b4b099c8e47cb4d995277fbd","first_seen":"2024-12-12T05:18:44.839951Z","last_seen":"2024-12-12T05:18:44.839951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":119,"dns":29,"connect":23,"send":0,"wait":39,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.netgreencolumn.com/tracker/tc_imp.gif?e=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\u0026cri=XMu4lBUxjr\u0026ts=217\u0026cb=1733980699667","fqdn":"obseu.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.678Z","timestamp":1733980699678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.netgreencolumn.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 28 Oct 2024 00:00:00 GMT","end":"Sun, 26 Jan 2025 23:59:59 GMT"},"fingerprint":{"sha1":"06:6D:6D:CB:AA:FC:45:6A:5B:7E:7B:BB:47:17:86:5D:51:0D:A9:08","sha256":"C3:E6:AE:A9:33:7A:DF:63:46:33:09:FB:2C:85:0F:1B:C9:FA:01:D6:08:DB:52:65:B9:11:BB:A9:BE:42:3C:51"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=XMu4lBUxjr\u0026ts=217\u0026cb=1733980699667 HTTP/1.1\r\nHost: obseu.netgreencolumn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nCookie: cg_uuid=8b8963ccadc46d73d89afdde6b7c76cd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Thu, 12 Dec 2024 05:18:19 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":43,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-03T23:31:33.386964Z","times_seen":355093,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003%2Cbucket077\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Funderground-revolution.eu%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1YTcyMWFhYWZjY3x8fDE3MzM5ODA2OTguNzI5OXw3OWYxYzA3NjYwNjliZTcyN2UxNzIxZTNkOGNlOTVkNGFiZTg4ZTUxfGlwbWFya2V0aW5nLnRwbHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwxMGI3ZmUyYzYwMTAwYzViMDA1OTRlZGUwMGMyMzhjNzIyNWIyYTA3fDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2767882553095168\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301547%2C17301266%2C72717107%2C49280903%2C72771954\u0026format=r3%7Cs\u0026nocache=6451733980699371\u0026num=0\u0026output=afd_ads\u0026domain_name=underground-revolution.eu\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1733980699373\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=696\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=702325170\u0026rurl=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt","date":"2024-12-12T05:18:19.634Z","timestamp":1733980699634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Nov 2024 08:40:55 GMT","end":"Mon, 27 Jan 2025 08:40:54 GMT"},"fingerprint":{"sha1":"58:3D:9C:C1:AD:FF:DB:76:C6:A2:47:40:3C:B0:40:4D:0E:9E:28:A8","sha256":"69:D9:6C:DB:46:5A:19:55:4D:FB:C8:DE:8B:3B:B1:3D:83:91:2A:86:1A:D4:EC:47:AE:C9:B2:2D:B1:AE:C3:E3"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Thu, 12 Dec 2024 05:18:19 GMT\r\nexpires: Thu, 12 Dec 2024 05:18:19 GMT\r\ncache-control: private, max-age=3600\r\netag: \"16455363413921140132\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53528,"size_decoded":53528,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, max compression","md5":"a4803017ab43f775390eeefe4cec1a94","sha1":"554a3bb8330f2e40a70fc07a0c49af0356dbe649","sha256":"25150f077cb3885fcbd6922a753b62960afe44a674152905ca2b20d80a51872e","sha512":"7016082f34dbf23afdfa91289c7116c79c82584fdb8840f51045e04063fb5524b5d2a18f2775e798c1f988e43f640ad6b17ded59aaaeede3ea3d54469f8b7b8b","ssdeep":"1536:RL5TxmUgLMNyLV17bHlxD0SJEBGtX3eplhEs9Sg:1FMNxfDlxDCQXesU","tlshash":"6933f285b73290e0f934b63d82d37ab95461b9c9969fff4fcd75d37d412aa10288408d","first_seen":"2024-12-11T22:48:25.827045Z","last_seen":"2024-12-12T11:34:57.698544Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003%2Cbucket077\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Funderground-revolution.eu%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1YTcyMWFhYWZjY3x8fDE3MzM5ODA2OTguNzI5OXw3OWYxYzA3NjYwNjliZTcyN2UxNzIxZTNkOGNlOTVkNGFiZTg4ZTUxfGlwbWFya2V0aW5nLnRwbHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwxMGI3ZmUyYzYwMTAwYzViMDA1OTRlZGUwMGMyMzhjNzIyNWIyYTA3fDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2767882553095168\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301547%2C17301266%2C72717107%2C49280903%2C72771954\u0026format=r3%7Cs\u0026nocache=6451733980699371\u0026num=0\u0026output=afd_ads\u0026domain_name=underground-revolution.eu\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1733980699373\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=696\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=702325170\u0026rurl=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt","date":"2024-12-12T05:18:19.832Z","timestamp":1733980699832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Nov 2024 08:38:44 GMT","end":"Mon, 27 Jan 2025 08:38:43 GMT"},"fingerprint":{"sha1":"38:49:64:1C:E7:DB:46:FE:EB:37:6F:02:8A:1F:A4:10:71:7B:92:A0","sha256":"9C:08:26:95:EB:DB:AE:F4:3F:9B:04:A0:3F:5D:9D:DE:CC:69:A5:F5:A0:10:C3:62:B7:63:B1:0E:0F:E8:7F:84"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Dec 2024 16:14:22 GMT\r\nexpires: Thu, 12 Dec 2024 15:14:22 GMT\r\ncache-control: public, max-age=82800\r\nage: 47037\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":200,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-04-01T02:57:50.32115Z","times_seen":412182,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":79,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003%2Cbucket077\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Funderground-revolution.eu%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1YTcyMWFhYWZjY3x8fDE3MzM5ODA2OTguNzI5OXw3OWYxYzA3NjYwNjliZTcyN2UxNzIxZTNkOGNlOTVkNGFiZTg4ZTUxfGlwbWFya2V0aW5nLnRwbHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwxMGI3ZmUyYzYwMTAwYzViMDA1OTRlZGUwMGMyMzhjNzIyNWIyYTA3fDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2767882553095168\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301547%2C17301266%2C72717107%2C49280903%2C72771954\u0026format=r3%7Cs\u0026nocache=6451733980699371\u0026num=0\u0026output=afd_ads\u0026domain_name=underground-revolution.eu\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1733980699373\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=696\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=702325170\u0026rurl=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt","date":"2024-12-12T05:18:19.835Z","timestamp":1733980699835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Nov 2024 08:38:44 GMT","end":"Mon, 27 Jan 2025 08:38:43 GMT"},"fingerprint":{"sha1":"38:49:64:1C:E7:DB:46:FE:EB:37:6F:02:8A:1F:A4:10:71:7B:92:A0","sha256":"9C:08:26:95:EB:DB:AE:F4:3F:9B:04:A0:3F:5D:9D:DE:CC:69:A5:F5:A0:10:C3:62:B7:63:B1:0E:0F:E8:7F:84"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Dec 2024 03:25:12 GMT\r\nexpires: Fri, 13 Dec 2024 02:25:12 GMT\r\ncache-control: public, max-age=82800\r\nage: 6788\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270,"size_decoded":391,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8959ddcd9712196961d93f58064ed655","sha1":"62ab1e38e7e9fbf58a04381b76c2d96a9c829f24","sha256":"17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7","sha512":"5e9effa313c30b351345db963238b4afd0728ca302fd79a853c80c89f042266d44cc1d29492520fb0fa80b47135e54e6963dfc21972f6b236b84c1da2fad809d","ssdeep":"","tlshash":"2ae068fa82846d044a8543b0ee09a7a442fff076535d90bbc1e4e6fcb0489eaacd2745","first_seen":"2023-04-08T10:54:48Z","last_seen":"2026-01-21T15:14:27.461955Z","times_seen":243741,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":207,"dns":3,"connect":21,"send":0,"wait":9,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.netgreencolumn.com/mon","fqdn":"obseu.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:29.681Z","timestamp":1733980709681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.netgreencolumn.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 28 Oct 2024 00:00:00 GMT","end":"Sun, 26 Jan 2025 23:59:59 GMT"},"fingerprint":{"sha1":"06:6D:6D:CB:AA:FC:45:6A:5B:7E:7B:BB:47:17:86:5D:51:0D:A9:08","sha256":"C3:E6:AE:A9:33:7A:DF:63:46:33:09:FB:2C:85:0F:1B:C9:FA:01:D6:08:DB:52:65:B9:11:BB:A9:BE:42:3C:51"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.netgreencolumn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2389\r\nOrigin: https://underground-revolution.eu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nCookie: cg_uuid=8b8963ccadc46d73d89afdde6b7c76cd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://underground-revolution.eu\r\ncontent-type: application/json\r\ndate: Thu, 12 Dec 2024 05:18:20 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph\u0026output=uds_ads_only\u0026zx=4ukh5jwa05xp\u0026aqid=G3JaZ5KQHb2xiM0P8L3JsQ4\u0026psid=7840396037\u0026pbt=bv\u0026adbx=375\u0026adby=132\u0026adbh=496\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet04_3ph\u0026errv=702325170\u0026csala=7%7C0%7C274%7C75%7C58\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:21.289Z","timestamp":1733980701289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Nov 2024 08:40:55 GMT","end":"Mon, 27 Jan 2025 08:40:54 GMT"},"fingerprint":{"sha1":"58:3D:9C:C1:AD:FF:DB:76:C6:A2:47:40:3C:B0:40:4D:0E:9E:28:A8","sha256":"69:D9:6C:DB:46:5A:19:55:4D:FB:C8:DE:8B:3B:B1:3D:83:91:2A:86:1A:D4:EC:47:AE:C9:B2:2D:B1:AE:C3:E3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet04_3ph\u0026output=uds_ads_only\u0026zx=4ukh5jwa05xp\u0026aqid=G3JaZ5KQHb2xiM0P8L3JsQ4\u0026psid=7840396037\u0026pbt=bv\u0026adbx=375\u0026adby=132\u0026adbh=496\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet04_3ph\u0026errv=702325170\u0026csala=7%7C0%7C274%7C75%7C58\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-CLkKCBBLfMYJkHJX1EewpA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Thu, 12 Dec 2024 05:18:21 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph\u0026output=uds_ads_only\u0026zx=acqorwwjmm1c\u0026aqid=G3JaZ5KQHb2xiM0P8L3JsQ4\u0026psid=7840396037\u0026pbt=bs\u0026adbx=375\u0026adby=132\u0026adbh=496\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet04_3ph\u0026errv=702325170\u0026csala=7%7C0%7C274%7C75%7C58\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:21.287Z","timestamp":1733980701287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Nov 2024 08:40:55 GMT","end":"Mon, 27 Jan 2025 08:40:54 GMT"},"fingerprint":{"sha1":"58:3D:9C:C1:AD:FF:DB:76:C6:A2:47:40:3C:B0:40:4D:0E:9E:28:A8","sha256":"69:D9:6C:DB:46:5A:19:55:4D:FB:C8:DE:8B:3B:B1:3D:83:91:2A:86:1A:D4:EC:47:AE:C9:B2:2D:B1:AE:C3:E3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet04_3ph\u0026output=uds_ads_only\u0026zx=acqorwwjmm1c\u0026aqid=G3JaZ5KQHb2xiM0P8L3JsQ4\u0026psid=7840396037\u0026pbt=bs\u0026adbx=375\u0026adby=132\u0026adbh=496\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet04_3ph\u0026errv=702325170\u0026csala=7%7C0%7C274%7C75%7C58\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-l3Nc-wZbZRFmw9KIjZtpnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Thu, 12 Dec 2024 05:18:21 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.netgreencolumn.com/mon","fqdn":"obseu.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:29.681Z","timestamp":1733980709681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.netgreencolumn.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 28 Oct 2024 00:00:00 GMT","end":"Sun, 26 Jan 2025 23:59:59 GMT"},"fingerprint":{"sha1":"06:6D:6D:CB:AA:FC:45:6A:5B:7E:7B:BB:47:17:86:5D:51:0D:A9:08","sha256":"C3:E6:AE:A9:33:7A:DF:63:46:33:09:FB:2C:85:0F:1B:C9:FA:01:D6:08:DB:52:65:B9:11:BB:A9:BE:42:3C:51"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.netgreencolumn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1607\r\nOrigin: https://underground-revolution.eu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nCookie: cg_uuid=8b8963ccadc46d73d89afdde6b7c76cd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://underground-revolution.eu\r\ncontent-type: application/json\r\ndate: Thu, 12 Dec 2024 05:18:22 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.netgreencolumn.com/mon","fqdn":"obseu.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:29.681Z","timestamp":1733980709681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.netgreencolumn.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 28 Oct 2024 00:00:00 GMT","end":"Sun, 26 Jan 2025 23:59:59 GMT"},"fingerprint":{"sha1":"06:6D:6D:CB:AA:FC:45:6A:5B:7E:7B:BB:47:17:86:5D:51:0D:A9:08","sha256":"C3:E6:AE:A9:33:7A:DF:63:46:33:09:FB:2C:85:0F:1B:C9:FA:01:D6:08:DB:52:65:B9:11:BB:A9:BE:42:3C:51"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.netgreencolumn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1607\r\nOrigin: https://underground-revolution.eu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nCookie: cg_uuid=8b8963ccadc46d73d89afdde6b7c76cd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://underground-revolution.eu\r\ncontent-type: application/json\r\ndate: Thu, 12 Dec 2024 05:18:24 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/track.php?domain=underground-revolution.eu\u0026toggle=browserjs\u0026uid=MTczMzk4MDY5OC43MDA0Ojk2Y2M0ZDgwMDkxODVmNTA2MmFiMmMwMjdiYzhhOTZiYjhkNGM3YjM0NjUyNjg3ZmEzM2IwMjcyNDY1MzIzMDY6Njc1YTcyMWFhYjAyMA%3D%3D","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:18.974Z","timestamp":1733980698974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"underground-revolution.eu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Oct 2024 23:29:07 GMT","end":"Wed, 01 Jan 2025 23:29:06 GMT"},"fingerprint":{"sha1":"89:C1:E0:DE:72:33:6A:84:DD:D4:CE:0E:B0:63:1A:4C:54:EE:51:D9","sha256":"24:87:F9:08:B6:79:D1:54:33:73:78:7B:85:5C:B3:E8:9E:B8:17:4D:ED:A1:87:61:63:E3:47:C6:54:80:18:E2"}}},"request":{"raw":"GET /track.php?domain=underground-revolution.eu\u0026toggle=browserjs\u0026uid=MTczMzk4MDY5OC43MDA0Ojk2Y2M0ZDgwMDkxODVmNTA2MmFiMmMwMjdiYzhhOTZiYjhkNGM3YjM0NjUyNjg3ZmEzM2IwMjcyNDY1MzIzMDY6Njc1YTcyMWFhYjAyMA%3D%3D HTTP/1.1\r\nHost: underground-revolution.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/hacked/Misc.txt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 12 Dec 2024 05:18:18 GMT\r\nserver: Caddy, nginx\r\nvary: Accept-Encoding\r\nx-custom-track: browserjs\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11858,"size_decoded":11858,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"45de29f2126b651b063bf4b6f04f9173","sha1":"ab372cf08edc59c99d58fd1628f36884f9b63086","sha256":"9f8b30ae5a92cd1b78dffe08bc6a4af3cd0d776954b12740b0e6317f4b14fdc7","sha512":"ee94ceafee5fb0b09319c77cc3d0cff2d39f596ad1746b04eb67db85e767311e63737158c6b74c2649208066215169d8adb5ea2d8956c95bc6bd1027c0e47ec8","ssdeep":"192:lEt7Y+aLwXOSt6aa/xQhH3tLt9ui1joybO+Ncuz9/AWoLKc//9lvM2cVtXfp8Nz/:lEt1EF03j8knBNcuzVAWoLn9l0xhfpk/","tlshash":"3232d02833d90331a1edfaf3f54511f94724818dbab98134e787155167fec947a94ac8","first_seen":"2024-12-12T05:18:44.848139Z","last_seen":"2024-12-12T05:18:44.848139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/hacked/Misc.txt","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-12T05:18:18.371Z","timestamp":1733980698371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"underground-revolution.eu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Oct 2024 23:29:07 GMT","end":"Wed, 01 Jan 2025 23:29:06 GMT"},"fingerprint":{"sha1":"89:C1:E0:DE:72:33:6A:84:DD:D4:CE:0E:B0:63:1A:4C:54:EE:51:D9","sha256":"24:87:F9:08:B6:79:D1:54:33:73:78:7B:85:5C:B3:E8:9E:B8:17:4D:ED:A1:87:61:63:E3:47:C6:54:80:18:E2"}}},"request":{"raw":"GET /hacked/Misc.txt HTTP/1.1\r\nHost: underground-revolution.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 12 Dec 2024 05:18:18 GMT\r\nserver: Caddy, nginx\r\nvary: Accept-Encoding\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_IZbI7SLziVHazuFiNJETot6bOR8c0zr8D8zpzMUQYKIWJr8J94W18ss168nK31YrjuHbsi9Pg2y5B9gVG+rOXg==\r\nx-buckets: bucket003,bucket077\r\nx-domain: underground-revolution.eu\r\nx-language: norwegian\r\nx-pcrew-blocked-reason: hosting network\r\nx-pcrew-ip-organization: Blix Solutions\r\nx-subdomain: \r\nx-template: tpl_CleanPeppermintBlack_twoclick\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6673,"size_decoded":17573,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8008)","md5":"f954942493d5fe457f84dfb44cf46a31","sha1":"98218f041023c66a6bca09b3d841cbd5f8706387","sha256":"ac53643779ec80591791d5630660bea80fbcc8bd2452cbf42b44bdf80042a9dd","sha512":"93bd449208e7768d57d2d153cdff941a4d352fe9eee4fb18ce28db390c6a42d6828786e18212f2f55276cc1dd2cc718d200b959488f53eeda06702cf47f238cd","ssdeep":"384:TiWYoHMfOTq2C4MpgEgA26EHeDCtkGarTqWUapimfRu6:Ti8MfP2CxUuEHSCtkGarT7Uawmfc6","tlshash":"ff8228a24d93242a5ddf605ecfb6f605b45cf103a91b9ca5f5ee87a42f8484c5032bb8","first_seen":"2024-12-12T05:18:44.850326Z","last_seen":"2024-12-12T05:18:44.850326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":304,"dns":1,"connect":27,"send":0,"wait":73,"receive":0,"ssl":273},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.netgreencolumn.com/mon","fqdn":"obseu.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:29.681Z","timestamp":1733980709681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.netgreencolumn.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 28 Oct 2024 00:00:00 GMT","end":"Sun, 26 Jan 2025 23:59:59 GMT"},"fingerprint":{"sha1":"06:6D:6D:CB:AA:FC:45:6A:5B:7E:7B:BB:47:17:86:5D:51:0D:A9:08","sha256":"C3:E6:AE:A9:33:7A:DF:63:46:33:09:FB:2C:85:0F:1B:C9:FA:01:D6:08:DB:52:65:B9:11:BB:A9:BE:42:3C:51"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.netgreencolumn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1610\r\nOrigin: https://underground-revolution.eu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nCookie: cg_uuid=8b8963ccadc46d73d89afdde6b7c76cd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://underground-revolution.eu\r\ncontent-type: application/json\r\ndate: Thu, 12 Dec 2024 05:18:34 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/track.php?domain=underground-revolution.eu\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTczMzk4MDY5OC43MDA0Ojk2Y2M0ZDgwMDkxODVmNTA2MmFiMmMwMjdiYzhhOTZiYjhkNGM3YjM0NjUyNjg3ZmEzM2IwMjcyNDY1MzIzMDY6Njc1YTcyMWFhYjAyMA%3D%3D","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.741Z","timestamp":1733980699741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"underground-revolution.eu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Oct 2024 23:29:07 GMT","end":"Wed, 01 Jan 2025 23:29:06 GMT"},"fingerprint":{"sha1":"89:C1:E0:DE:72:33:6A:84:DD:D4:CE:0E:B0:63:1A:4C:54:EE:51:D9","sha256":"24:87:F9:08:B6:79:D1:54:33:73:78:7B:85:5C:B3:E8:9E:B8:17:4D:ED:A1:87:61:63:E3:47:C6:54:80:18:E2"}}},"request":{"raw":"GET /track.php?domain=underground-revolution.eu\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTczMzk4MDY5OC43MDA0Ojk2Y2M0ZDgwMDkxODVmNTA2MmFiMmMwMjdiYzhhOTZiYjhkNGM3YjM0NjUyNjg3ZmEzM2IwMjcyNDY1MzIzMDY6Njc1YTcyMWFhYjAyMA%3D%3D HTTP/1.1\r\nHost: underground-revolution.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/hacked/Misc.txt\r\nCookie: _cq_duid=1.1733980699.esyrad6MsYEVSvLo; _cq_suid=1.1733980699.QJB5TARIbSWExcy2; _cq_pxg=3|030\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 12 Dec 2024 05:18:19 GMT\r\nserver: Caddy, nginx\r\nvary: Accept-Encoding\r\nx-custom-track: answercheck\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.netgreencolumn.com/ct?id=77721\u0026url=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt\u0026sf=0\u0026tpi=\u0026ch=landingpage\u0026uvid=115\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1733980699450\u0026hl=2\u0026op=0\u0026ag=718972423\u0026rand=03561971191072672695829117879981515297160982020286286508110670761076812829089238015809\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=XMu4lBUxjr\u0026pto=1164\u0026ver=62\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1733980699.esyrad6MsYEVSvLo\u0026suid=1.1733980699.QJB5TARIbSWExcy2\u0026tuid=1.1733980699.44ZHudB8dxuZNt2i\u0026fbc=-\u0026gtm=-\u0026it=10%2C638%2C79\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi17c2w2Lj5JZGlhbmh%2FLjk7RGlhbmh%2FLj5P","fqdn":"obseu.netgreencolumn.com","domain":"netgreencolumn.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.456Z","timestamp":1733980699456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.netgreencolumn.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 28 Oct 2024 00:00:00 GMT","end":"Sun, 26 Jan 2025 23:59:59 GMT"},"fingerprint":{"sha1":"06:6D:6D:CB:AA:FC:45:6A:5B:7E:7B:BB:47:17:86:5D:51:0D:A9:08","sha256":"C3:E6:AE:A9:33:7A:DF:63:46:33:09:FB:2C:85:0F:1B:C9:FA:01:D6:08:DB:52:65:B9:11:BB:A9:BE:42:3C:51"}}},"request":{"raw":"GET /ct?id=77721\u0026url=https%3A%2F%2Funderground-revolution.eu%2Fhacked%2FMisc.txt\u0026sf=0\u0026tpi=\u0026ch=landingpage\u0026uvid=115\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1733980699450\u0026hl=2\u0026op=0\u0026ag=718972423\u0026rand=03561971191072672695829117879981515297160982020286286508110670761076812829089238015809\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=XMu4lBUxjr\u0026pto=1164\u0026ver=62\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1733980699.esyrad6MsYEVSvLo\u0026suid=1.1733980699.QJB5TARIbSWExcy2\u0026tuid=1.1733980699.44ZHudB8dxuZNt2i\u0026fbc=-\u0026gtm=-\u0026it=10%2C638%2C79\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi17c2w2Lj5JZGlhbmh%2FLjk7RGlhbmh%2FLj5P HTTP/1.1\r\nHost: obseu.netgreencolumn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Thu, 12 Dec 2024 05:18:19 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=8b8963ccadc46d73d89afdde6b7c76cd; Max-Age=29030400; Path=/; Expires=Thu, 13 Nov 2025 05:18:19 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://underground-revolution.eu\r\ncontent-length: 1157\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3257,"size_decoded":3257,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3287), with no line terminators","md5":"63474867a70b028234c9323da143e2a5","sha1":"03137f1f9f40d5ef7252f09dd2f5032fde476830","sha256":"f4c10a5e605f244aed0e2b3cf96f97ec29bff395b4e36a6450277f4b9ced3721","sha512":"2b9cef68f6610e95988370d117ed72aac6ba7581dc48b84249aafcd37aad34652aa90b87a461c1378e8d2f84975a11950afcefd2fb6aa89de8738a2458d6f359","ssdeep":"","tlshash":"3461d96a65dadef857b982bafdb43ef077e35df756cb801e00934e43024a2183e40544","first_seen":"2024-12-12T05:18:44.852352Z","last_seen":"2024-12-12T05:18:44.852352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":128,"dns":15,"connect":36,"send":0,"wait":50,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"underground-revolution.eu/ls.php?t=675a721a\u0026token=10b7fe2c60100c5b00594ede00c238c7225b2a07","fqdn":"underground-revolution.eu","domain":"underground-revolution.eu","tld":"eu"},"ip":{"addr":"185.53.177.31","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://underground-revolution.eu/hacked/Misc.txt","date":"2024-12-12T05:18:19.047Z","timestamp":1733980699047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"underground-revolution.eu","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Oct 2024 23:29:07 GMT","end":"Wed, 01 Jan 2025 23:29:06 GMT"},"fingerprint":{"sha1":"89:C1:E0:DE:72:33:6A:84:DD:D4:CE:0E:B0:63:1A:4C:54:EE:51:D9","sha256":"24:87:F9:08:B6:79:D1:54:33:73:78:7B:85:5C:B3:E8:9E:B8:17:4D:ED:A1:87:61:63:E3:47:C6:54:80:18:E2"}}},"request":{"raw":"GET /ls.php?t=675a721a\u0026token=10b7fe2c60100c5b00594ede00c238c7225b2a07 HTTP/1.1\r\nHost: underground-revolution.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://underground-revolution.eu/hacked/Misc.txt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 201 Created\r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-origin: \r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncharset: utf-8\r\ncontent-type: text/javascript;charset=UTF-8\r\ndate: Thu, 12 Dec 2024 05:18:19 GMT\r\nserver: Caddy, nginx\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_nr/u8KRQQ608INQKezsScPslVuY+X6aGEi7LmNOtUn6HlAkJ52cfCUG4xroaXyG1qNF0Mw293rxbK07UG1oF3Q==\r\nx-log-success: 675a721b7e34341d7e0ba664\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":null,"data":{"size":16,"size_decoded":16,"mime_type":"text/javascript; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"dac3510b7572d5d0a91c5cabcfffb808","sha1":"8f3fde801270c1046ce441e8a9df9a01d5142102","sha256":"4f32d280a95889bb861167e00c1b95a773707eb98dfe2cc1736bf8884a2259f5","sha512":"9cc87310f8da4d1a644433fac8c253fff04bed9f81ab0be68e7653f0a1dfd40e2a1d1257426600ab364d252ebcc81f80b9b9507ca17681f40fb099a582e660dd","ssdeep":"","tlshash":"5a700003000000a2c0002000020a2e202200002280000a00820820088a208003082002","first_seen":"2023-04-05T09:52:32Z","last_seen":"2025-04-06T21:27:31.835668Z","times_seen":13732,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}