{"report_id":"48be7c59-7182-4e95-a3e9-7189fc5791dc","version":6,"status":"done","tags":[],"date":"2026-03-21T19:29:16Z","url":{"schema":"https","addr":"dofuspourlenoobs.com/","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"dofuspourlenoobs.com/","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"title":"Repaire Qutanien","dom":{"size":50410,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4282)","md5":"520477f7a7787d24f7253c0c66802d46","sha1":"be996373e6a14af2b5c1d388b42f65db0b086f9c","sha256":"ad27b62946b3dc952ab639fc247a06bcc2f072daa67b09047b08ac220f34ca7c","sha512":"c1a9cb544bdfbee6dc40451460119b77a5fcce5bd1c2b7b8d992cd1ea444116bfe1d12ce24b638431aa5b628fe881fb8b50b8f5377443813da3d48b004bb56eb","ssdeep":"1536:NjIRIOITIwIgI+KZgNDtIwIGI5IgJ7SWIRIOITIwIgIAKZgNDtIwIGI5IZJ7Ssmh:NAE7qy","tlshash":"0133a9d780ab9d360339c1c5a2ae6b5671eb8d38fa5345a0f3bf432e52ced42725405b","dom_hash":"domhash1246d966aca93106d762be8325b500ea","first_seen":"2026-03-21T19:29:19.062283Z","last_seen":"2026-03-21T19:32:01.952626Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dofuspourlenoobs.com/","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T19:29:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dofuspourlenoobs.com","ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2024-11-24","domain_rank":0,"first_seen":"2022-02-07T04:57:51Z","last_seen":"2024-01-25T08:00:34Z","alert_count":60,"request_count":30,"received_data":3632420,"sent_data":14190,"comment":"","tags":null,"fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dofuspourlenoobs.com/","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"3282f0bf67bd37a5da7bfe9caf7dc0ec","sha1":"b2e89c5d5b184741c544edfcb7d26e5d6d4f4d2e","sha256":"95dbf6f001e8dbd50a67b96195d596bac8b0f876f0c4cfaa1e22dfe3c70bd4e5","sha512":"8545bb515ca9438018e6cfe46530ef372acf38e0b37e92c3df0692b5f1e94c5868389237ba0fa107c7bf5feb00f08c6ba822c0dd46717c3067ab4a0b00a7b458","ssdeep":"","tlshash":"48e0ec7264439c746d9931db0797e101a63cd8814008b215a4911c4cf68b928db6ed30","size":424,"data":"","first_seen":"2025-01-07T19:37:43.758858Z","last_seen":"2026-05-29T18:03:54.386584Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dofuspourlenoobs.com/files/theme/arrowup2.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /files/theme/arrowup2.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 704\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"cdfc94864cc13a3303d8eadc4ba862ce","sha1":"1c6dbc6361345afdeb81d77513fa22f19a999883","sha256":"b87ac25978021e8d44ca34e8bf0e12d1315339306b9556f937a84653df4fc311","sha512":"0416e3e6b6def3c454f1a2fbd22b5f769a17c2afbc8d648617702173372fe601907d5e5668612fa214ee45644d04183e1f26d393d542581609c780f5bfd372fc","ssdeep":"","tlshash":"4a0149db3cc421f99c56567a4fce142ccbd1077ee5a71b4190604e7490756dc65a9072","first_seen":"2024-11-26T15:18:31.515024Z","last_seen":"2026-07-27T00:05:58.782875Z","times_seen":30,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/akceloOutstream.js","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /akceloOutstream.js HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T18:49:03.871988Z","times_seen":17804246,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/images/quth.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /images/quth.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 413485\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":413485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 463 x 441, 8-bit/color RGBA, non-interlaced","md5":"f6a17e6b13c0b35ed8bd6573fcd0ea9e","sha1":"45a79009967247fcadb96cdf21f82f269328f3b4","sha256":"b51db72d073174d2e2d2f58a0dcb4650ebc80e2ddcb1efae9eeb9aaa7dabbdfa","sha512":"5d1bad53e2cdd0ce2c0fc7236eb357758dec3f09ca2ac187a2273733ecba7536bfb565901cee00729e268638642000e4eb86c0cce316f8a8fceeba777e1c8c00","ssdeep":"6144:hUaSe/7rSreF2/n9OY5uer1dcAXmj0bVv9DnfjIuLN2GihqxrJZtxJilyY7kV:hUaSe/2/n9d5LcAWjkVt7IuLdrfsi","tlshash":"3b942329dcba306c08a3b862ab787a39e8dd0ffc5c575244d47271a90da57bf7f88414","first_seen":"2025-01-07T19:37:43.750445Z","last_seen":"2026-03-21T19:32:01.976485Z","times_seen":5,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/files/theme/social-icons.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /files/theme/social-icons.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/files/main_style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 12264\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 100, 8-bit/color RGBA, non-interlaced","md5":"6541727b4e2e0e3754671c5c8bc866f6","sha1":"2bbd87c25c2132f5440401c2c18504b4a47f8b96","sha256":"4787de85af7f300bfea63c83f0e6661af7d3d2c6759d69f63d5e13e66bd807a9","sha512":"faf62d4700c9835b0d2bc4854b7fa26af80ac645e989fe97965ce0b591e37ebc0a144ee056528f291e49e0ab61c1319504f26c36dbc171bd4ff897c053baa66b","ssdeep":"192:0FkVFFgBaYJ0Ct5HuTf0xtirF2rgQnEq5Z5Fi8F9mr+wrEczWKSNRbrzg0q2a1MU:0FkVF6BapCt5oqy/QnE2fPczWXN9Rs93","tlshash":"ce42ae703cf14442e3ce65aa5bf8102b7f9e4f84ae9509c0f12e56918d00269bb9fec7","first_seen":"2024-10-15T14:43:02.092347Z","last_seen":"2026-07-27T00:05:58.785687Z","times_seen":24,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/images/common/search-light.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /images/common/search-light.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/css/sites.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1363\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 39 x 13, 8-bit/color RGBA, non-interlaced","md5":"57e00b9c62394b2e16fad248b9827803","sha1":"4b60949a6133762f89d5a7d3f15374b04b8daf7c","sha256":"857025abd99dc6b9c24115cf2eee06c1e0302c736cbd697d93f33172eae6ea68","sha512":"89c12854cfe27e4bbbd5095f1e5116eb07a581126054ac548df306c08d9f933b33b1e165996d4158313241c2f7280787acbf057744ce78000c6bc988254d7bb2","ssdeep":"","tlshash":"2d2163cfe840aa069189e50110fed427a41b4980a8e4e87666cec89f8da01f50c5d3df","first_seen":"2023-05-17T18:28:17Z","last_seen":"2026-08-09T01:38:45.270341Z","times_seen":364,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T19:28:53.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 01 Mar 2026 23:30:21 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":53338,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4298), with CRLF line terminators","md5":"a1dd601d8aa235c33a7054c5b712f883","sha1":"71cbc40c91027ea9f55a8d5fd8b812db88512220","sha256":"50fbe8e1f4e3a203573c63ac903312bf1188b4d4254893fdf7cb9af0e6d286a0","sha512":"b3146f12015869619bf2eab39b211f59c70f8bed50f640e7d17aa5510af7a63ce1a32878f7455b7d93c528c13a750e88cb3ed05933c201664259cc5e58932d86","ssdeep":"1536:CkIRIOITIwIgI8KZgNDKIwIGI5I4J7SPIRIOITIwIgI+KZgNDKIwIGI5IVJ7SAX8:COo7t","tlshash":"a23343e6b1af94360339c1c792ba675a75efc938fa530060f2bd533f52ce912729405a","first_seen":"2026-03-21T19:29:19.080288Z","last_seen":"2026-03-21T19:32:01.985047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":394,"dns":120,"connect":92,"send":0,"wait":123,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/promo/promo257-pandalap2.jpg","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/promo/promo257-pandalap2.jpg HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-09T17:47:21.175158Z","times_seen":54872,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/images/archequtan.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /images/archequtan.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 968125\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":968125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1161 x 606, 8-bit/color RGB, non-interlaced","md5":"e69b052813fd8be8bcae548b7f161c7d","sha1":"8ce9790c890c8ef9cb7d9ee9ea324a5273b30799","sha256":"30146abfd7e502abf1e439e2824342e17fd75ca7150103ee9769beec33b62bf9","sha512":"7ca2ae10a8ebf61b4f7ee3b62c1d643b3d3e613ec699b5d447d9b8b37e9a177aa6bb392a817b0c2df251fdb617225e62fcab7867a9a7710eaea0a3427edd3166","ssdeep":"24576:klHba51KYEgaAFFP07L9roZfAq7sCC4ZxosKKHGgg:WInE6F+7LxoTtUKHGgg","tlshash":"ca2523c4d2eb35afe620ee6a290c5f25bd917c07c8c46f11285fd70e518dbf95b226a0","first_seen":"2026-03-21T19:29:19.081816Z","last_seen":"2026-03-21T19:32:01.98016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/files/theme/body-bg.jpg","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /files/theme/body-bg.jpg HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/files/main_style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1009\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, software=Adobe ImageReady], baseline, precision 8, 40x40, components 3","md5":"ccf62e4cc40d74875d207dc111c86a5f","sha1":"d72de60f8462917f64cf8af9b82a0d92f9d24b1e","sha256":"31062fa1a42d1391848895872a263daf3df13bdaac716abf20365bad44158136","sha512":"5418400c5430db6ed1f7e4d32aa3bfa7cfe7d217b6fcbb55d9b7e9b9571163649a263e616909c25e2f652955ace3353ce301602b4ff4287e97142bf7b3c162d3","ssdeep":"","tlshash":"f311886a0f079fa0dde248f55d11c245d3ef75c67aa723071772c164bb205c99d116ec","first_seen":"2024-11-26T15:18:31.56459Z","last_seen":"2026-07-27T00:05:58.776814Z","times_seen":24,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/illus/com-right.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/illus/com-right.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/files/main_style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-09T17:47:21.175158Z","times_seen":54872,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/fonts/bebas/regular.ttf","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /fonts/bebas/regular.ttf HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/fonts/bebas/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 36796\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36796,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"OS/2\", 24 names, Unicode","md5":"3ef73ff48d36ad769ecdd8ad805dda61","sha1":"f230fbf8ca49786267c9dc8853083bdd1dec2dfb","sha256":"9150a3daca54b2734801e723414c21ed23c228cd9f33dc92a43f7f3c0d62146b","sha512":"21d15d7d9cf113286f53151af744ba7c5e45ce1e5faa8651528ad3abe7356e299cfc63cfa98a59e8d5944ca73655f27f8a1c7e4cab5ceaf7e03d50df2a892afb","ssdeep":"768:8BiPPsvBipVhH2jcrd1+jcrd10RSEikw5dYbXF5FlHDL3mnd2+oY2:8g3svBuhH247+47LdYbX3FlHDSnd2P","tlshash":"6af2f99bb2543113c7a2db32e7ae9e1bdbd4b929571d270e9d8ecbd5a7840038a3141c","first_seen":"2023-04-08T17:40:45Z","last_seen":"2026-08-04T06:05:11.565414Z","times_seen":278,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/adagio.js","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /adagio.js HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T18:49:03.871988Z","times_seen":17804246,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/adagio.js","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /adagio.js HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T18:49:03.871988Z","times_seen":17804246,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/favicon.ico","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:55.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:55 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:55 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d00c4010ee84fc86686abc48c82f1d0c","sha1":"d92d8476bae154a59969aec62222c62a4fb97432","sha256":"d9d4617d6ead0258f56e8b7be97a62a55f498d881e5641624b3e9574d1c52458","sha512":"066523d7974daeab50cc2ae5f13efb2296bbdcf7b016894f58e7c4ca629c93038f35d43b0a8f454f157699c7ff37ff883f49647e9e2eba57a418f84e02a43dec","ssdeep":"48:MaUL4R2EbzGYo3OZHHWF9T0O5XdSvqaMAEzWKBX4e+g9MAT:MqXG8ZnO+O5agdee+k","tlshash":"8091a7036b415e27cb461b7dc4d0e33a7371ce8c557587021ae2fc6b7a94aa52e03075","first_seen":"2025-01-07T19:37:43.756571Z","last_seen":"2026-07-27T00:05:58.777989Z","times_seen":18,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/icones/apple-touch-icon.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:55.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/icones/apple-touch-icon.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-09T17:47:21.175158Z","times_seen":54872,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/client.js","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /client.js HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T18:49:03.871988Z","times_seen":17804246,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/fonts/bebas/font.css","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /fonts/bebas/font.css HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 168\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Mon, 20 Apr 2026 19:28:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":168,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c50bcd38fc86e1d85463ca0173964ddd","sha1":"3c4aaa6b023da78b8936d7144ac41746f2049373","sha256":"fcadfdf44653e8479edab18780de9a6be7bf6780fb8951cc84cb2121d30f5c6c","sha512":"1efe40ce0f50dd15bee2db0abd5ff90e299cc5cd6dc48db5953966535027d3e26b897d3afec4d60e7ed888369e284e73ecd0393dbd8bf71b601ee19bafb81695","ssdeep":"","tlshash":"97c08cc053ddb433c29038cae3f29f62498ea02c0068c1a6e3381ba84c3180a813cba5","first_seen":"2025-01-07T19:37:43.719412Z","last_seen":"2026-07-27T00:05:58.781019Z","times_seen":15,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/promo/promo257-koumiho.jpg","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/promo/promo257-koumiho.jpg HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-09T17:47:21.175158Z","times_seen":54872,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/uploads/1/3/0/1/13010384/background-images/580535765.jpg","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /uploads/1/3/0/1/13010384/background-images/580535765.jpg HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 363444\r\nlast-modified: Mon, 09 Feb 2026 17:12:20 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":363444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"Created with GIMP\", progressive, precision 8, 1200x250, components 3","md5":"80d4a952a8e47b9946211b8ab8feddff","sha1":"a6dd9345b170a5494bf836030c3477cb16f78e67","sha256":"6726671f5b040efccccbbafa8dbed8e00804eb220bfafe84ea448b35769b1b23","sha512":"effc42f277a57d18a2fdbcd581a035bae427e1ddabec8f5de96403780c8d59e995ab411a473abdc1ee19c87de64b5e40a2afb94928fe919f628bd32fe818bd4f","ssdeep":"6144:DGB7k2oGdyhB7sZsS2B+XozWPUDf8iRv0iSCD/tkYUNQVBL+Q:DGu514ihCUdxc/NcBLj","tlshash":"f974237a09016df5f108de199bb3abfbb3aa600079ac88505050bb4fd56fdd601f6ac3","first_seen":"2024-11-26T15:18:31.556827Z","last_seen":"2026-03-21T19:32:01.960262Z","times_seen":16,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/files/theme/submit-bg3.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /files/theme/submit-bg3.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/files/main_style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 452\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"99d63a3be510b5f6831e9effe353e56e","sha1":"90d754943cb0c20c8ba28400343e793c7c9c9df8","sha256":"8af9a03331b6b9aa0f7d95dc3ec676c89515ec5310be80073a9d4b9adbe3f4dc","sha512":"f66685f1079c5ffcd4519706e5e969bb70d0fdb8228b288f95539f58981df18041b9520710a464ab79745bd1b5b5dcb1f5f60f1e8df2fc1975aa82d33ac9e642","ssdeep":"","tlshash":"5af05ceec2a000fa67684c76122f0089a8439a7990022b8850f9a0eba08f88600fd882","first_seen":"2024-11-26T15:18:31.561066Z","last_seen":"2026-07-27T00:05:58.765843Z","times_seen":25,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/css/sites.css","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /css/sites.css HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Mon, 20 Apr 2026 19:28:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":259803,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b84569364c469117b196cbadec36cc89","sha1":"f740e7914d0a1e15b6a58b18b7a0d16c996e3011","sha256":"241e20355eeeedc676194a2238e84130b62e5e93be3c50ff7cc377b934ce5c7b","sha512":"66a05dfb4990443a5bc0a690998505e901b32e0df55ba6da86cf185b98196cb69ca49c282e7ac3d6e82670c24afffbba9457c64b4b91b9e64a0f93802a8dc077","ssdeep":"3072:qYH45LO30OvLvXoNkmvip3CQksvglPmzMCTTHofQhTW/c2/jpUVgb5GRko7TgzUz:MzUpJnf","tlshash":"954486ecf9302201273a9e75a75172b63f29b075df4303297ae4f144b2c9aa54633e9d","first_seen":"2025-01-07T19:37:43.715244Z","last_seen":"2026-07-27T00:05:58.767699Z","times_seen":14,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/files/main_style.css","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /files/main_style.css HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Mon, 20 Apr 2026 19:28:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47169,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"66c53c565924ba98a66afae0234ecbf8","sha1":"3a66db3340f77f6234d593321bf1410a080f96c2","sha256":"2a3a2c7c68295634afd61ac4df35bbc364f0482115f02c093661c8391a31bb02","sha512":"31cb8e5a53d45348983d0a67844d5fa6446c596b46e66440e357aa298cd6f5752c2affa5d391d50585490a24cad729438f252fa8f9a76b1d88acb23e904cf83f","ssdeep":"768:xEboMknViJ0PGk+0PGkdZCdjKA+MljTV2ZHYV2ZHc0PGkbZCdjeIMB:xEboMxJ0PGk+0PGkdZCdjKA+MljTV2ZF","tlshash":"742343acdb441100a236cb68b7c65ba17f7d81a2df03077dbfe51199b2879e81271f98","first_seen":"2025-01-07T19:37:43.718016Z","last_seen":"2026-07-27T00:05:58.758209Z","times_seen":15,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/uploads/1/3/0/1/13010384/1426805183.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /uploads/1/3/0/1/13010384/1426805183.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 6703\r\nlast-modified: Mon, 09 Feb 2026 17:12:20 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 213 x 20, 8-bit/color RGBA, non-interlaced","md5":"4a0eca1a0fffe47143d2d9c7c4a3ebac","sha1":"657306faca303b6b7d79522bc1f13b30b265a0e3","sha256":"e28963898b0ce5a8a3704e9e1936f112f5525cd69ae45aeb9bdffe8b29dd30b6","sha512":"1bbd0667bddbd809fc5d41dbf18822eedfb55d262164c0b081a4ec6d10c9ef4e9e93e51f067680597d7281557987457d5703a71dea8804a0de302cc2ded50128","ssdeep":"192:XycQjTdYp0dUqid7gVCmqYoQLDM6CmCC+uido/hRO:icCdYCktgAzY8m5+doPO","tlshash":"83d1aeed929a0a499c096f42fc5fd341fbbe57e012883f899f90096974634e35740f97","first_seen":"2024-11-26T15:18:31.518094Z","last_seen":"2026-07-27T00:05:58.78381Z","times_seen":31,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/promo/promo257-shogun-tofugawa.jpg","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/promo/promo257-shogun-tofugawa.jpg HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-09T17:47:21.175158Z","times_seen":54872,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/images/qut1.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /images/qut1.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1395109\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Wed, 20 May 2026 19:28:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1395109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1253 x 772, 8-bit/color RGBA, non-interlaced","md5":"ccf9d5b42919b565e1774fbe94596394","sha1":"623ca15d44c109ad480e1a33426e8769d32ecaa8","sha256":"9835133d425e9fb167a3020267fb87078b926b9b4caa6b1a5e90cfacdaa92d69","sha512":"b98e215f862bcf049e51203796c168868fa79e285be7f3943df38d0c9bc552f0441aa4d4d278d7a0807d59266b3e38b5ca12492acccbfafc7cea63aa1502913e","ssdeep":"24576:1yZhr51209dwM15o4HIn/+u/TadR2loRJSOmVWnNdZpCH:gJ9b15o4H6/t2d97S5VWnNXpCH","tlshash":"0f2523f73a6bc637340ac6e8dca0d00c5f0462c4c7c50226a23555b36fab9bb5b69e47","first_seen":"2026-03-21T19:29:19.089811Z","last_seen":"2026-03-21T19:32:01.982242Z","times_seen":2,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":432,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/f.txt","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /f.txt HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T18:49:03.871988Z","times_seen":17804246,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/releases/v5-5-0/css/solid.css","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /releases/v5-5-0/css/solid.css HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 09 Feb 2026 17:12:20 GMT\r\nexpires: Mon, 20 Apr 2026 19:28:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":633,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (444), with CRLF line terminators","md5":"892a7bb74bf3fb046e9964c9b31ebe5a","sha1":"89421e94ef52a625d759ed509b48887edf4bfd17","sha256":"cc6c5269281f53c49f4c6a149fdfa6c09ef3feee908c7b25daa9f4a13d54e64c","sha512":"39d52d2b5a7445505bf3557fb99c70ae2d9e3332cc03b02ec4f484589049554ca0bf6f8e6ccc017f2cb7d28c940c6b75c8be377d1329f68fdd4b7feb47487fe3","ssdeep":"","tlshash":"fff0f46e0646295201820f0134daba1dde56b0b87c582f62b22adc3d88f9d5f21b9f09","first_seen":"2025-01-07T19:37:43.712931Z","last_seen":"2026-07-27T00:05:58.789979Z","times_seen":15,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/css/old/fancybox.css","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /css/old/fancybox.css HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 09 Feb 2026 17:12:19 GMT\r\nexpires: Mon, 20 Apr 2026 19:28:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a2452eb0f47142d4043e7d3ca89acd6a","sha1":"60012662c5a404528fb5519eb7d06a4d2bbffbb2","sha256":"a6f03d0e016df31708b21067e5a8b1c75b089997c41fa577d0c202b88ca1f524","sha512":"f246b48be8dfc92ffe7dd594e5f87c207007ff1f898e5dc436458c1d2889d8e66e4bab9665ff9e20995c2f70de48b200d4eabaae54f203b057fb80bb090ebf67","ssdeep":"96:IKuMSJ/1/jDzWs9LOmx9MnSJ8RdnrWCVX:IBN/DWs9lAn68R8Q","tlshash":"1ba1e0af96103000543bdea0e75f8a59ea750095bb1202fbb7fcf51193cabe461a2de0","first_seen":"2025-01-07T19:37:43.716605Z","last_seen":"2026-07-27T00:05:58.780033Z","times_seen":14,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/releases/v5-5-0/css/fontawesome.css","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /releases/v5-5-0/css/fontawesome.css HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 09 Feb 2026 17:12:20 GMT\r\nexpires: Mon, 20 Apr 2026 19:28:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":49846,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49657), with CRLF line terminators","md5":"bfbfc1d9fd68c2b7b65ef8ac891203d3","sha1":"4d1f76c9a35e7f37368c7bec4e6f762f414a3027","sha256":"e052cc0ea64c97cd810fa5bc42511f1eff0c90b8fccdc8e68d8e2dad2ae4b4bb","sha512":"5bdee4b9f885a610bff3b2599a32f680c792b79bf3ba23c92e0cf0b0f41c0c53fbd9c74bdfa26f9738dbf5973b1cd2f01f8085b4d8c436c99c8080d2fe96b158","ssdeep":"768:8ka31EzKOSd6lGUxPfXkQMT/mMcj3wbRQU9nQzu:8krz706lGO/BMStsKU2q","tlshash":"8e23fab8e54c41d9a732c04fff42b2b861b6f73de5814d95f04e691c2ad22a811c5fba","first_seen":"2023-09-21T19:09:03Z","last_seen":"2026-07-27T00:05:58.790944Z","times_seen":22,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dofuspourlenoobs.com/uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/illus/com-left.png","fqdn":"dofuspourlenoobs.com","domain":"dofuspourlenoobs.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dofuspourlenoobs.com/","date":"2026-03-21T19:28:54.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dofuspourlenoobs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 09:14:16 GMT","end":"Tue, 19 May 2026 09:14:15 GMT"},"fingerprint":{"sha1":"CF:5A:F2:63:CB:2B:1D:2A:F8:57:5C:99:25:C2:C5:CE:30:BC:FC:49","sha256":"43:54:93:F1:1B:1D:AF:18:AF:08:76:64:1D:30:00:7E:E3:2C:6E:D4:D6:BD:AC:DD:D3:FC:3E:05:B9:5F:08:85"}}},"request":{"raw":"GET /uploads/1/3/0/1/13010384/custom_themes/586567114324766674/files/illus/com-left.png HTTP/1.1\r\nHost: dofuspourlenoobs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dofuspourlenoobs.com/files/main_style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 21 Mar 2026 19:28:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-09T17:47:21.175158Z","times_seen":54872,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dofuspourlenoobs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
