{"report_id":"4abf56a4-9619-465c-af78-d54aa060db9c","version":6,"status":"done","tags":[],"date":"2026-03-22T15:54:54Z","url":{"schema":"https","addr":"mirorx.gotit.best","fqdn":"mirorx.gotit.best","domain":"gotit.best","tld":"best"},"ip":{"addr":"172.67.181.128","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mirorx.gotit.best/","fqdn":"mirorx.gotit.best","domain":"gotit.best","tld":"best"},"title":"Are You Human ?","dom":{"size":21025,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11205)","md5":"c16aff7aaabde4631df6ea5f066837d3","sha1":"0e4480fb85a21d7d6a3399b59b97d48dd9fcd506","sha256":"612f8aa3e0b6382ffdbe3fbc311dff78229ddadb1f8abfebb62a1197571fb371","sha512":"819087f272a0f2a5bb3532e1ddbb668acbe3204270074f6493381c4f5774c93544d62389155caf39e1725d70b9d766961799cc9875cf2ed8f2c85d0917186cda","ssdeep":"384:E5a8tSIAywGs+SmK0c5j/ERwSVIs9pT6H3vSx7JfKIBYyoFbqy:RJywGs+gjj/ESM9Q6xZKca","tlshash":"43928f70a5a15639f52b96346fdea28e34338207d506cbadfdcc2124cf96de0c4ab348","dom_hash":"domhashd617e9ce26d22550a8d2053efa144c8d","first_seen":"2026-03-22T15:54:56.544583Z","last_seen":"2026-03-22T16:02:50.535743Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mirorx.gotit.best","fqdn":"mirorx.gotit.best","domain":"gotit.best","tld":"best"},"ip":{"addr":"172.67.181.128","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T15:54:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mirorx.gotit.best","ip":{"addr":"104.21.18.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2026-03-22T15:54:54.289715Z","last_seen":"2026-03-22T15:54:54.289715Z","alert_count":0,"request_count":2,"received_data":13266,"sent_data":927,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-15T22:30:49.343058Z","alert_count":0,"request_count":1,"received_data":103006,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mirorx.gotit.best/","fqdn":"mirorx.gotit.best","domain":"gotit.best","tld":"best"},"ip":{"addr":"104.21.18.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cca7fed3fed7b547cae0ace7b05a3b6a","sha1":"d6ea39b202aad0466be5ab6bb8ad8e7d55ba724f","sha256":"4bd5a4892a27798aa9c193701ba5c5b705d200f6a6b7cf71a7c2927d15fbd866","sha512":"aac3f4ce9155f79bea9161b571277f5ff923ccd8b4f259577d1b7a1c0868a4314042d4c363186634a216e35d97c3a0b6a1025cda9063a4ebd24f43f4b6d3c782","ssdeep":"","tlshash":"ec31696ef1a30571aa6790764acf1b9e38220107f802caa57dcc85e15f41d65a63f5d4","size":1603,"data":"","first_seen":"2026-03-22T15:54:56.554276Z","last_seen":"2026-03-22T16:02:50.538198Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mirorx.gotit.best/","fqdn":"mirorx.gotit.best","domain":"gotit.best","tld":"best"},"ip":{"addr":"104.21.18.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91a28fbf77ac54aab8b53070c6fdda77","sha1":"30051ffc0f2c0496a6b602374774250f00e19139","sha256":"b4a8ed815a7ba85cac050b2c1bb87c1a7760f64e681e9ebea74e24e9b7e7b8aa","sha512":"e3d5b468dc7004985edf912d616049ee713004b6ee786df720e0115f496bbce785ee1be65940ae46d1fbe366a956bea7fb2e1db02ad08320641ad57c9176abdd","ssdeep":"192:xeHRcOZniB08ca+bIOx2nkaS9X2WmoIeTiSmKTmhGZ5j/ECXDAhaY2O6LGVN:x5a8tSIAywGs+SmK0c5j/ERwSVN","tlshash":"9842bf70de45ff24e59b063d9e1ee04aa87383c734aace47f58ca4106ff6d60894d258","size":12334,"data":"","first_seen":"2026-03-22T15:54:56.556558Z","last_seen":"2026-03-22T16:02:50.538652Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"11a39cc97facb3c4f51a899b7e32b6a7","sha1":"8f6b47380cd783adeefc4e501c43ed420c7b137c","sha256":"e0b5db3e531654733e4bf3e41fc100d5658ba6a154d1fe6a80b670df8c229461","sha512":"ce325920473ef61e419cf501e53f744ee49271896b7ae5d3d99c4fd4f21978c75e91ccef3240da162bfec0457c1cda37b2c65f7227770c10095e5719097ed77b","ssdeep":"192:/G9pKQeA4F9kem+9VTvSnGVXmc6QkPtnKcKL/GSP5ZVgyoFbqhe:O9pKQQ3vSx7JfKpPTVgyoFbqw","tlshash":"8d02d63971a10438f623c6107fca678e31319017d505c6acfedd2268cf86ad9d9bb688","size":8390,"data":"","first_seen":"2026-03-22T15:54:56.55969Z","last_seen":"2026-03-22T16:02:50.539182Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"mirorx.gotit.best/","fqdn":"mirorx.gotit.best","domain":"gotit.best","tld":"best"},"ip":{"addr":"104.21.18.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T15:54:32.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mirorx.gotit.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 14:42:19 GMT","end":"Sat, 20 Jun 2026 15:42:12 GMT"},"fingerprint":{"sha1":"BD:00:A9:A1:81:DF:C1:59:B3:BB:CF:6C:34:FA:A5:54:E0:D0:1E:67","sha256":"78:38:4F:D0:63:9C:6A:F7:B4:90:97:40:85:8A:7F:2C:09:FD:57:59:B9:52:83:70:BF:47:B2:19:D5:42:84:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mirorx.gotit.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 15:54:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CUD%2FfZR445EaX8GG3NFhKdG1jRAKhNnqE%2BcDBgXv1mZZOxZHMAgUV9VLxpcdUjp6jnlFSaJy3bVmqKeKPIhdEfoJ8DpoxgLbuosbibhKwzpv\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e0660230dd64eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12540,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11205)","md5":"1265c89010faecf53f7419b4c23aa5d6","sha1":"eb906fc162f0443794619bc172c3773b327dd2cb","sha256":"3141fb3de31e9b19e18ff124fb7641335af837125aea5672dabb490a307e56a0","sha512":"0b413a782e3ec7433a7eee61c1cb9515712a7080ff7d455dd44308cc2fdc78f7e734914e067783537ea94071686eddfbbf386c5a4fab0a969844764d8dff6c98","ssdeep":"192:weHRcOZniB08ca+bIOx2nkaS9X2WmoIeTiSmKTmhGZ5j/ECXDAhaY2O6LGVs:w5a8tSIAywGs+SmK0c5j/ERwSVs","tlshash":"8b42b0b0de45ff28e55b063d5e1ee04a986783c7349ace07f58ca4105ff6d60c94d258","first_seen":"2026-03-22T15:54:56.546678Z","last_seen":"2026-03-22T16:02:50.536379Z","times_seen":4,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":36,"dns":13,"connect":8,"send":0,"wait":52,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mirorx.gotit.best/","date":"2026-03-22T15:54:33.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mirorx.gotit.best/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 15:54:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 138929\r\nexpires: Fri, 12 Mar 2027 15:54:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxkuZA322iN1EwAxhGdixZVrCyir3j%2Fd6oC3hi30LvP9SjzJUCDZoxNorne3JS9K%2FV3s3RrW%2BFudEln2pRiNH8f%2BuOwzqVGm9eHgVUyZTdIkyZ4%3D\"}]}\r\ncf-ray: 9e0660246a1735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-13T14:51:34.651083Z","times_seen":59760,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mirorx.gotit.best/favicon.ico","fqdn":"mirorx.gotit.best","domain":"gotit.best","tld":"best"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mirorx.gotit.best/","date":"2026-03-22T15:54:33.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mirorx.gotit.best","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 14:42:19 GMT","end":"Sat, 20 Jun 2026 15:42:12 GMT"},"fingerprint":{"sha1":"BD:00:A9:A1:81:DF:C1:59:B3:BB:CF:6C:34:FA:A5:54:E0:D0:1E:67","sha256":"78:38:4F:D0:63:9C:6A:F7:B4:90:97:40:85:8A:7F:2C:09:FD:57:59:B9:52:83:70:BF:47:B2:19:D5:42:84:70"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mirorx.gotit.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mirorx.gotit.best/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T14:51:47.486746Z","times_seen":17872751,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}