{"report_id":"4c5d916b-e2ee-4773-b734-03eaa1b0e6da","version":6,"status":"done","tags":[],"date":"2025-10-07T02:47:33Z","url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":0,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"title":"Common | Airdrop"},"submit":{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":0,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-11T02:47:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"bsc.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":2964008,"first_seen":"2023-11-21T22:39:48Z","last_seen":"2025-10-06T16:22:05.405614Z","alert_count":0,"request_count":8,"received_data":15303,"sent_data":3987,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2025-10-05T23:37:58.377794Z","alert_count":0,"request_count":1,"received_data":6019,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-10-05T23:57:03.635816Z","alert_count":0,"request_count":2,"received_data":514,"sent_data":858,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2025-10-06T16:22:05.457321Z","alert_count":0,"request_count":2,"received_data":6185,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"commonlabs.xyz","ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":19,"request_count":19,"received_data":15910252,"sent_data":9336,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenLayers","description":"OpenLayers is an open-source JavaScript library for displaying map data in web browser.","website":"https://openlayers.org","common_platform_enumeration":"","icon":"OpenLayers.svg","categories":["Maps"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-05T22:15:09.164871Z","alert_count":0,"request_count":2,"received_data":798861,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-11T11:09:50.344324Z","times_seen":31895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/080bde1e-9dbc-48d9-862b-530ba17c8a4e","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-09T15:35:30.742787Z","times_seen":4177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T17:52:11.36382Z","times_seen":237593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e9e3ad57abeefde87342864450cc232","sha1":"4dc8676bf3417d597053d5f253fce034007f63da","sha256":"9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26","sha512":"b2d8e0e883fc8af91de120565298502b6e5b0f6e20275ecd2974de3e768a19a443f7facc2127201df66725c20451b924a69eaab78224073e385f14a5431c3a6c","ssdeep":"","tlshash":"34c0123621525559045b3d04a66ba14a758791b2a9025401dc7ee5a0311bc9aad0255e","size":181,"data":"","first_seen":"2023-03-07T01:17:43Z","last_seen":"2026-08-11T15:30:47.449869Z","times_seen":59620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"a13f6bd85432f72a119eb693b8987fbd","sha1":"d3f1cd7d3e3d9c4d7b0621246ab4dc0b694447c4","sha256":"66ca0c0974e50b726622fb859bfb98f26639ac62d91ce8aa1cdb7cb6c5933bab","sha512":"1f592344a296264a2f3c4964c1863bc3583170b768fafcdd0589e9d2209a854b8b8ac6df859e6a8997f84f026e09350af04ea21dc7c49285b09e978ad5470dad","ssdeep":"6144:VfvSVzG8QL9ZiiXHiiX9esBj8ypOonZtvHFeM5VKgIBj0xNNrkUwxdzH7O0MYmYl:VGzGZL3iiXHiiX9XtEL","tlshash":"0e742081828ef06af340a19d5e19727edb5489181ac85d27ef3dbe49ec9cd7392c35c2","size":355122,"data":"","first_seen":"2025-10-07T02:47:44.621666Z","last_seen":"2025-10-07T02:47:44.621666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/902fc0e5-f685-40ab-acaf-db42eb29e4bd","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e859325c4db72a7a71bb4cc911c21ad7","sha1":"61525a0bce36c1689eaa9a2d34a613b9e01d8950","sha256":"f8226ca8f41f616dc7773ba37d7b73197eb7674954597dbeda5ee8ed91f4e275","sha512":"1376a8fec1f044c86c13482a73caa69109e3bd5700edb402e4d895aa47540bc6d60bf155fe65f7bb8fd45b54386f7616a391cb94b8228fd546bb37a83d9a3907","ssdeep":"98304:kbBHBlBBfZ9ahJ9RPQUG+PyBstBB3ReyX:kbFdxZ9ahJ9RPQUGzCbBBeyX","tlshash":"ac367ee473a5b0a2479751e8543b5006f339ac59580c846cf6d8e8fb3ab8d8c51bbf39","size":4880407,"data":"","first_seen":"2024-09-04T22:24:40Z","last_seen":"2026-08-09T15:35:30.731473Z","times_seen":1438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T17:56:39.098668Z","times_seen":741849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/bfb1ef3a-6cb8-447c-bcb8-5e62ac69c263","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcef5c901a31a7c7764cc6d48f1af7f","sha1":"5581013bfb0875128600fe3a23293916683008c2","sha256":"5e95ec5ee07a9947d00ed15f11e46c685dc2027d06f38503ea6ba79c615dac21","sha512":"af0bc50a7fabfbe22643dc3b3bcc368b1f2a4e7af4a3179b96339c973381bfdac6345fdc5fb2e47bdfcf58e64c7f9ca7ac8b9f0d385ea8f1cf3d29537303b5a6","ssdeep":"24576:HMEPkmsumjrh/607yBNfOOphXHjfUw7wZzwD8uzwEUF7+:HPIy0Y9pD8uzwC","tlshash":"1c269501a000bebedaea27fd05b2c0e597105680fd6c799ab23cdfe77749e5324d2856","size":4856002,"data":"","first_seen":"2025-10-07T02:47:44.628007Z","last_seen":"2025-10-07T02:47:44.628007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/38706ba0-daf9-4b73-994a-da6079746ef2","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T18:07:32.919098Z","times_seen":91771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/openlayers.slim.js","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"308989825e3c941617eb698ac7343e25","sha1":"5ee280c9b6945532ded72ca9402c3d0ea25ba462","sha256":"1441b3b8863c27df0d9a208b6b8bfeae0ffff7fe1c01051766fe2aca53a1b461","sha512":"26d2f5f854f5f709ae7754bc6064c8258709f9bfb9519e589221430e85b4a9cafc913975d5fcdcad20576d6aed96405c6cb5c65b67c92736f0245cd054bd4b33","ssdeep":"3072:f35t0MtwaKQLTBbiiXHiiX9XL99hrtah5mN0xjJ72EJuLbe2MFaHQFGrTkB9bFLK:f35xtwa1LTViiXHiiX9XLTknbF6yj3NW","tlshash":"6e74ff86828ef06af300915d5e19327edb5485181ac85d27ef3dbe89ec9dd7392c36c2","size":361292,"data":"","first_seen":"2025-10-07T02:47:44.602296Z","last_seen":"2025-10-07T02:47:44.602296Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://commonlabs.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:15 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nx-cache: false\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9jiykU8i8%2BGIjPVYPXxcRqWo2JVan78zdgNMk%2FX9KUTIYShQAUuxrK2O0TU7r9QXVQgqrX0o6dP7R4VA6We1o638zwxbPOa%2F8AAKpw%2BP4YrZ\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa129e6c74568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-08-09T15:35:30.717016Z","times_seen":4827,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-07T02:47:10.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 11931\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Oct 2025 03:37:27 GMT\r\nETag: \"ed85-64024b43a8bc0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenLayers","description":"OpenLayers is an open-source JavaScript library for displaying map data in web browser.","website":"https://openlayers.org","common_platform_enumeration":"","icon":"OpenLayers.svg","categories":["Maps"]}],"data":{"size":60805,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28738)","md5":"a48abac2ebc42acb45490fe6818008de","sha1":"ac94b79895d88bc1d492f07b353e3d16b28e3c87","sha256":"78db96e62b83a17121384a701b440498a5d580aefd68c2a9ed3293ea77e4579a","sha512":"b5b1974f1ea087c5e966c74ea9da0bfc5b58c09348a8cce8572682386e34151fb1b3b24bee8d6b68d6d487a78b8b87239e9b5750e66107b246806bf2bb2bbc70","ssdeep":"768:mboQv9Cq8DXgP2boJrg9gvEIhU9zBU9zryQvDX6jgjgVqUK7mO2LvgZHifo7o:mLAkjsK7mO2Lvgdex","tlshash":"ff53fb70d5e4107ba5070acae5bb6b4e36ca768bce830488f6a59352cff6dc5ec10e15","first_seen":"2025-10-07T02:47:44.567125Z","last_seen":"2025-10-07T02:47:44.567125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":35,"dns":3,"connect":15,"send":0,"wait":28,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/dropdown-3.10.5.min.js","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:10.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /dropdown-3.10.5.min.js HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:10 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 02 Oct 2025 03:29:10 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68ddf186-b87a1c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12089884,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"606b0510aa06042c6b453c27d5910ca7","sha1":"d33c1571a3ea409580f43a5e348888af25601608","sha256":"e226d3e3c7d9c7e4104f2f6eb31c63da392670fcd518d3a833bbd1dc3b071b78","sha512":"3c81d4ef527d965868279742f329c0f80b7ec5304d847ae29b4d57cd6cf93d9ce3eecba8660cba990d56217e17e90deafab7204e2b2e19411159cccb25dbeec1","ssdeep":"24576:UFkEoEYIe6xbzFHF5ilUNunvjB9O/N+r2+hFBJWjkR:UFC","tlshash":"7825613e9e3702b58ab1b45ddc725b0edca0de840155f6379a7cb9aabb45029d4c323c","first_seen":"2025-10-07T02:47:44.570509Z","last_seen":"2025-10-07T02:47:44.570509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":30,"dns":0,"connect":15,"send":0,"wait":29,"receive":220,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/flex_the_access_in-situ%20(1080p).mp4","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /flex_the_access_in-situ%20(1080p).mp4 HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 863937\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Oct 2025 03:25:30 GMT\r\nETag: \"d2ec1-64024897dfe80\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-863936/863937\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81621,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"7f79a87e90b1744bc83d9d2ad6e6e5a0","sha1":"9e0ad4e87a2aca62e7b17c88ac50b127d43040fc","sha256":"c282fb8a5dae094a586dc4138e6ba0d844e7d023b8a7fe6d2c7f9a9312d5be54","sha512":"68f7ec2e9ca7ea5e77154f61cc273e8e0252fcb7f920a1efb10324c3b8c3da7a756b27f454026f4dc6fcfe73d8f484b488cc82d712086874ed5f453c0b8de83a","ssdeep":"1536:xXLSCEdBjTKAjEFyACFJkRW1VkWMicdM03Jov6SdbtTCeEA:1KgKAyDJSW1VH6dNZaeA","tlshash":"0483f10a3bf0bd52e961237ddcdf0f5871b9d6829a432b6757c1336a4e61b91838a0dc","first_seen":"2025-10-07T02:47:44.573121Z","last_seen":"2025-10-23T03:32:08.216424Z","times_seen":3,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":32,"dns":0,"connect":15,"send":0,"wait":33,"receive":16,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 98aa1299dafc4e4c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1164418\r\nexpires: Sun, 27 Sep 2026 02:47:14 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2YXHf7y4EanDwlRxvZQ480lcFRKByx0oNy67k30dHh6zDM0N%2FVgpssss1%2Fl%2BbbSO4U9j6kyqmASuhnxWXfod%2Fh8SWTTmFiPjVmhSdjIA9yOfn%2BPLLCbJP1MZAddVybJl0rwkWUlA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://commonlabs.xyz/\r\ncontent-type: application/json\r\nContent-Length: 2185\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 02cb9b4bbb842092d4c26f88348b8e63\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98aa129d99c456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3687,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ec3eb01f4f5f4a18ad5387424ea5b889","sha1":"1f8948aa569624104f976d3ae2e2887b1bba6845","sha256":"d799d76f9dda7da96534e670574e55ef5bbe26644c3c2afa451306d34906e208","sha512":"eb4fac8228131ad7336b0110465318fee9b980a5f1f1e07a17a588babbe6a638a722801fc8b50aa44aeee679645b9909516675091f2eec43d2db28263b55b572","ssdeep":"","tlshash":"067132f87e046441e1e72d66f32d7ba822223553cfc69b4615ff73ed16394191a4c8c5","first_seen":"2025-08-07T19:38:26.248322Z","last_seen":"2026-02-04T16:05:37.339434Z","times_seen":36,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/65a81abcfcd2ced445754c23_GT-America-Standard-Regular.otf","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /65a81abcfcd2ced445754c23_GT-America-Standard-Regular.otf HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/common-website.webflow.shared.fce88bee2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 105480\r\nLast-Modified: Thu, 02 Oct 2025 03:24:58 GMT\r\nConnection: keep-alive\r\nETag: \"68ddf08a-19c08\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105480,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"e8cb4c90d580a9077a3d6dc1fabd689b","sha1":"33be05819ae5c0f769f35506699a61e5526d2f5c","sha256":"063c39b4d7d2f9e4dba6eaccf2256443799ee51716fa0d2890e0f7aad509e942","sha512":"315828ff1afb4e760e1a297a0592a5e9ef0fee4e96500e21c161770e29829ecbe9f0f2555f1841fefb2789bd7518ebe261ed47e043c11ae3abd93bb1e7f67d08","ssdeep":"1536:8qCDjIt1kwEDyssejVjJ2jQql00OfeZjTiCGA63fnalTR1sCPy3i3gPwv:8pjFwls9J2UqlAedTzG54TxOiRv","tlshash":"99a3bf5e3f036b01ebc29d361ae7c7f4236174145e6b9e1bb296c5e05de13e80e496c8","first_seen":"2025-06-02T11:01:25.092994Z","last_seen":"2026-02-16T15:07:11.417342Z","times_seen":12,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://commonlabs.xyz/\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncf-ray: 98aa129cd99756b1-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://commonlabs.xyz/\r\ncontent-type: application/json\r\nContent-Length: 60\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-trace-id: 77eda61ae5f16690fc371e71ec5b20ae\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98aa129d09a756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5463134c0ea86caaf7b16dc5d234236","sha1":"89c5acabcfef0bd597c5636b409d7bd24b6237c9","sha256":"d1f6939d4458dcac5d59e2cecec56cc8cb6ba730d2f54639f7824404f801d57e","sha512":"1c1022e76aca5ebc34b5a300285110e4a50b35f3442ad8ef78bf5fdd98243887ab33691843f761ca64e39b09f0fa961a2d2040d9a9f83816c2cbe94af985fa48","ssdeep":"","tlshash":"da9004c15d070731451c0c41d404015130c3374c05041f04540f4540705c147534c31d","first_seen":"2025-05-04T14:51:03.899344Z","last_seen":"2026-06-03T16:15:21.762262Z","times_seen":104,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/65a8107b678696f46163aee6/65a8182e9aaee38e4bdd9e49_webclip_256x256.svg","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:15.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /65a8107b678696f46163aee6/65a8182e9aaee38e4bdd9e49_webclip_256x256.svg HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nx-amz-id-2: b20BuirYM6ADiI3y4BltKRLwUQKY78L8PS/zeGPS+KVMJlvlJtQjjdM9zIbZ5Qm4OqNs76Hc3a4=\r\nx-amz-request-id: 2AYMXVMZTMZTZBYE\r\nlast-modified: Wed, 17 Jan 2024 18:10:55 GMT\r\netag: W/\"0e217c87e6818abfe262fe89aca88717\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: 3rWdK0UOEtBhyogoW2KCSU3g5.RnIMHe\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98aa129f4f225685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5381,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e217c87e6818abfe262fe89aca88717","sha1":"e98462e972aeefaf160d14253605250abceaee13","sha256":"9fd01f0c8387afb0022ee3e245056dd04478099ba58e726dfa5a0ae39f959f4e","sha512":"a1402b7a1453655eaa8bb3d65fa9e756dfa747e3a7374e6cf2d71176b6a5596b7ee9d326a8227c59ed3633afd134ee700b43169ca4da995b7ff3829c78692a4c","ssdeep":"96:qSMWlYVsr5luBR2RaX86aAdCEa2hwuld7RAZsK5MB1oHmIOr8EhD:dMjKPeucvld9AR5MB1oHmJ","tlshash":"1ab1a5bc23b69af7e68982d49df270cd68ae10bb92e11318f75d11531f042e519633d3","first_seen":"2025-10-07T02:47:44.582435Z","last_seen":"2025-11-04T03:43:31.344268Z","times_seen":7,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":4,"connect":2,"send":0,"wait":46,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/65bba1b6c069b75a483860ec_common-favicon.png","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:11.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /65bba1b6c069b75a483860ec_common-favicon.png HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 2590\r\nLast-Modified: Thu, 02 Oct 2025 03:24:38 GMT\r\nConnection: keep-alive\r\nETag: \"68ddf076-a1e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1d3ec9a19fb0d62db2d11ee45af831ce","sha1":"064407882cc86f7d2ddc3c812a9ccd926c13a6ca","sha256":"706baba12f6b32fdb7f1da73a6e2a0f12736b0cd1bdf0565a792db0e27964bb1","sha512":"69e7ed9703ae6b23d435a771b9cd922bde87eaeea589e64059855a48c6668f75953cb04c092e3c10f4296354a566ea029bbf6b51aad92c977ad98fa36642b020","ssdeep":"","tlshash":"2451d609fe467409a205d258fad65a87a927c4a0ecc0ebc37efdc8870520079453eae7","first_seen":"2025-10-07T02:47:44.584432Z","last_seen":"2025-11-04T03:43:31.345307Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/65c1b428d4328e6d63d0f60a_dot.png","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /65c1b428d4328e6d63d0f60a_dot.png HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/common-website.webflow.shared.fce88bee2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 561\r\nLast-Modified: Thu, 02 Oct 2025 03:24:37 GMT\r\nConnection: keep-alive\r\nETag: \"68ddf075-231\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b671f018595882719829b0663cfcb160","sha1":"a83c23dfec8a4907a2a6a3e3fb8dab43c926c41c","sha256":"61ab1dfdf1cdc088955d7213508fbce6aee6c1c4615b8aeb787b9fb00df3d80d","sha512":"4a5252704644913c1b1b2026ca5d4f6ed4834ba883df74995c96b9b35e5fd86650175b52de53ec8723eba6c9c6566d6ac705b6f6255bb952ba6fce07af67f704","ssdeep":"","tlshash":"c2f096c7e9c4c28c0a0d1652a2e1a6c37c31531cb6f1480fbc02360484780f02b3031a","first_seen":"2025-10-07T02:47:44.586672Z","last_seen":"2025-11-04T03:43:31.349651Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/65a81949a962d7df13cc953f_MDNichrome-Regular.otf","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /65a81949a962d7df13cc953f_MDNichrome-Regular.otf HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/common-website.webflow.shared.fce88bee2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 71828\r\nLast-Modified: Thu, 02 Oct 2025 03:24:54 GMT\r\nConnection: keep-alive\r\nETag: \"68ddf086-11894\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"fc9f8478e4e1fa06e84ed5d6dc74ae6c","sha1":"73b78e94154b15c55158b996da77ca5db3001df2","sha256":"24d8e7833085bb5ed8cf8fef7b2d22378b9e669003f9260b4ec9ff2071010133","sha512":"c2a92e5713f672217bf2384b5bc1d81f278d3e1e5d6f02fca178c280d7c78c27ceb75530a98fb43bfeed268f075284305aeec95deaf1ea29e0bc9d8b999c5b34","ssdeep":"1536:Jzjf5FVgpg8mCphY0JVtmvfDm30BLEiAV:Jfjx8mCprWdBLQV","tlshash":"5b637d05bb522702d21759370ea3c7314b2bf044ef2fc75bb54601f89d8d39a8e766aa","first_seen":"2025-10-07T02:47:44.589057Z","last_seen":"2025-11-04T03:43:31.350849Z","times_seen":7,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/cross-platform_community%20(1080p).mp4","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /cross-platform_community%20(1080p).mp4 HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 295089\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Oct 2025 03:25:22 GMT\r\nETag: \"480b1-640248903ec80\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-295088/295089\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81621,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"812e386d2082dce1fef0bfecb0a2dcea","sha1":"e420078c5c0924321f48c44d229990b963d26dd3","sha256":"ba0cb485ddf57bcc3e177bcb3074036d7ec51d635ded67d272800b2592b5f9d1","sha512":"20b2719ac17130b84389b23b11f63e29c89387f85a88e662311eb6a51a9a6f5dab8f5c0bc7626a744f8924c87748815289ccb8a9fcd8fd99294d320a3aaa3487","ssdeep":"1536:GRL+uUX/iT2C2688AY4R4cEpmh6aKqMFoPwLdc+q:GwuqIPA/mpmh67ZFooLW","tlshash":"6083f1406be76b16cd2995368ace07143332cdb48e0f17e3461d26678d55ff71ba90e4","first_seen":"2025-10-07T02:47:44.592329Z","last_seen":"2025-10-26T13:57:52.845679Z","times_seen":3,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":32,"dns":0,"connect":15,"send":0,"wait":31,"receive":17,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 98aa12991a674e4c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1029549\r\nexpires: Sun, 27 Sep 2026 02:47:14 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0B%2BZw6zaurerb2Keo%2FAL2Br%2FHmiei5XDVKOEb2nOwOFhCbDQ6iIHyqxKzLF3Jd1OAqmnugIUdk71MqXyKCj4pX9TLwxiLJ8aAdsnDerjE7Jils%2FPPqyw3DRVI9tHiPGoT3v1rknP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-11T11:09:50.344324Z","times_seen":31895,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":10,"dns":1,"connect":2,"send":0,"wait":14,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://commonlabs.xyz/\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98aa129a7c750731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"fe777a3a8d004d84b62313827ded2db7","sha1":"600215d0f499a5ff7594ea5570db918eb8ae8870","sha256":"f5e28bbb3d54aea69e945ea6e24db8d7d9e1024275d9278b0ba4118b17a29c51","sha512":"47ba4830e4111c0809203fb0c7903033e987301da2a6ba7725d0bdf81634ea66ce3e3528a11458bfa5a7188fcc71f6d80c19e7e71d64793b4a0ed72d2367f972","ssdeep":"","tlshash":"fd6000300000f3c30fc0c0300030000030000000c0c00000030cc030300f000f0c00f0","first_seen":"2025-09-29T13:35:28.335273Z","last_seen":"2025-10-07T05:07:39.187418Z","times_seen":602,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":45,"dns":0,"connect":2,"send":0,"wait":94,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://commonlabs.xyz/\r\ncontent-type: application/json\r\nContent-Length: 60\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-trace-id: a543c22b7b9bc8034508511a6acb61dd\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98aa129c998b56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3fc075d15069541661a6223c0fcf19cf","sha1":"a168d9e5ee257446f10ad171ed172ebd5d2569c0","sha256":"ed5e21408f235ed4b864606bb77a023494714c81853f36597becf09591ecabdd","sha512":"bd215e771eb0eab7feba8f1ac81278df4fffc9442d1ef3845ec119a5047643d42aa094137a597883880251ec1ac1956285a08b59380c871134d716b91baf67b9","ssdeep":"","tlshash":"fe9004c115070731451c0c41d404015130c3375c05040f04440dc5417054147730c31d","first_seen":"2023-05-22T02:38:15Z","last_seen":"2026-06-13T15:26:27.639192Z","times_seen":320,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/coin.png","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:10.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /coin.png HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 638816\r\nLast-Modified: Thu, 02 Oct 2025 03:25:29 GMT\r\nConnection: keep-alive\r\nETag: \"68ddf0a9-9bf60\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":638816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"1314bff7ccd4e0b842d5665a91a4d29e","sha1":"0c1b7c66763ff20aa57931dd4f0aaf60dc7dfa29","sha256":"9fe57e927c389aab082a61eb2fff95995f8c7c733718f77081019be728707a97","sha512":"c0878b10f1aa0670ebe3814fce26ad098f42486caf652414d5f3247e7820a8eb6fdc31177c1c84917155c59822dbc2af526b6c91ef5f0d712c17d75a9a17c157","ssdeep":"12288:CuKflqhTYCOur5p34g7dv6IYxWSdIjXbCduekrfUXns2hwfUK:CuElqhMDQ5ayydIK8d8Xs2hwf5","tlshash":"83d4230cd9bb6880ddd95ffa0f854a5973b00ee70dd11e4e0693717c0a946bebb688c9","first_seen":"2025-10-07T02:47:44.597641Z","last_seen":"2025-11-04T03:43:31.348568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":14,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/flower_illo_loop_final_@2x%20(1080p).mp4","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /flower_illo_loop_final_@2x%20(1080p).mp4 HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 1862487\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Oct 2025 03:25:31 GMT\r\nETag: \"1c6b57-64024898d40c0\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-1862486/1862487\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1064657,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"68217c876c4337dcc4c8a1357a69ac13","sha1":"63e1cad4ef120f465b48f083c0b3d50b2ad66707","sha256":"23bfcb52c569b163eedc9715f8dc0353260441863b7bc42ea1bdc87b17a7a45b","sha512":"8ed97eca8a228a5d491d82f95a0ebc769196db1a0700e4f2be9624918993ff777265fb75e5bd172404b1216e0117df57474edaefe0a3facdc763100aeedbeadd","ssdeep":"12288:fQsKmvr4RVnMXt6TVeFVtCit6f2j0OXuQ/kdvv2Q+fcRYM59IpxvaiJR15IeZRaB:fLKc6TVeFCl2+glfce6ifiiJRnIeDaGg","tlshash":"e62523887f55e429f818867f00c051f5eb99d2a70701693b9173bbd22f849d9e72e0ee","first_seen":"2025-10-07T02:47:44.599514Z","last_seen":"2025-11-04T03:43:31.346378Z","times_seen":4,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":48,"dns":3,"connect":14,"send":0,"wait":29,"receive":95,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://commonlabs.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: c955b4afd098669242a151336f3f4b9e\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98aa129c096456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8cddab4c6b3bdd125741fea6f6871ad7","sha1":"89bdb44fce716f9de64eab2676f97773a15a56c5","sha256":"09895382537cb3db8470f3c9089fffa5259749eecec52412221d38154adcb281","sha512":"d2a4c8dfbb298b36acd708e5a0bc3477b728459e1c33ecf421b286adf4d709d2db8db123eb0b37d5ef63d3e982e8f0631e67acb1c0f97a5741d127fc9daadc15","ssdeep":"24:Y2tXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:Y8am3QytxvU15+doY1jNNTt9jv","tlshash":"b5d10bf098c98e50f19b5a81b798bc9400113caf7fdf8f40415cf8b6a0f549176a448f","first_seen":"2025-04-17T10:18:27.874943Z","last_seen":"2026-06-28T16:47:47.420106Z","times_seen":907,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://commonlabs.xyz/\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncf-ray: 98aa129d59b856b1-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/openlayers.slim.js","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:10.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /openlayers.slim.js HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:10 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 02 Oct 2025 03:29:52 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68ddf1b0-5834c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":361292,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65285)","md5":"308989825e3c941617eb698ac7343e25","sha1":"5ee280c9b6945532ded72ca9402c3d0ea25ba462","sha256":"1441b3b8863c27df0d9a208b6b8bfeae0ffff7fe1c01051766fe2aca53a1b461","sha512":"26d2f5f854f5f709ae7754bc6064c8258709f9bfb9519e589221430e85b4a9cafc913975d5fcdcad20576d6aed96405c6cb5c65b67c92736f0245cd054bd4b33","ssdeep":"3072:f35t0MtwaKQLTBbiiXHiiX9XL99hrtah5mN0xjJ72EJuLbe2MFaHQFGrTkB9bFLK:f35xtwa1LTViiXHiiX9XLTknbF6yj3NW","tlshash":"6e74ff86828ef06af300915d5e19327edb5485181ac85d27ef3dbe89ec9dd7392c36c2","first_seen":"2025-10-07T02:47:44.602296Z","last_seen":"2025-10-07T02:47:44.602296Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/ui_02.mp4","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /ui_02.mp4 HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 380138\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Oct 2025 03:25:27 GMT\r\nETag: \"5ccea-64024895037c0\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-380137/380138\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163541,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"beb25d3f1e3eca1c89ff3526ef0530fb","sha1":"f0abe17ea549b968d33d3acbb41dd6c6c0154a9b","sha256":"975da402ad56001f3350d961a0b28ee4153a012bbc03c9332f20cb222d5dd79f","sha512":"982f828603d12b769bcc1005c200a604124b84bae39269dac66d6f76a21c0b91af94d91465882127d3e20cb485258ed13a2072a74eb3bcb3f088493ba4cf39d5","ssdeep":"3072:aS3MYQmDEWMA/BKmh6y5rUAQhEpVhZT204h231WwYxTHMvpIDCkPDuft7rC:ahmEAKmh6y2NhEpVfY2319YxrapUCCDf","tlshash":"e4f3121417e95a23dc757f36255a8bce3613a2c2452e43e745b6bd360c22bf60bb18e3","first_seen":"2025-10-07T02:47:44.60426Z","last_seen":"2025-10-07T02:47:44.60426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/empower_the_squad%20(1080p).mp4","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /empower_the_squad%20(1080p).mp4 HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 471795\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Oct 2025 03:25:28 GMT\r\nETag: \"732f3-64024895f7a00\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-471794/471795\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":471795,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"8fbb389f8a5c934b9fc00e62a0b7e994","sha1":"0bc736519ab7ade79b06d478507157f6927940a4","sha256":"f472e42b59cdc13e502b94621341a2fc57b92137be32dd3769a2f27a4fd4e022","sha512":"f2332489e0dccf0f6c2555c46391dfe3f6f464a4c3352787000a5cd8fb432eda674a9b1d4b0bc9557a12e361c56ba5352ed9e7b91b62d5efab2aaf30104ff397","ssdeep":"6144:zv0lOjWJq06BZW4/SeBu4PLWi+A3BwObgxK4Fo8f35PdEc6BrerskES:UqzBd/nBhPqi+fy0FhfEBrIskES","tlshash":"d8a42321bff33b46dc34023aa04d13655399fe40921fbbdb98c675523ea3aa64d51af0","first_seen":"2025-10-07T02:47:44.606494Z","last_seen":"2025-11-04T03:43:31.33893Z","times_seen":4,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":24,"dns":0,"connect":22,"send":0,"wait":29,"receive":62,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://commonlabs.xyz/\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98aa129a7c720731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"fe777a3a8d004d84b62313827ded2db7","sha1":"600215d0f499a5ff7594ea5570db918eb8ae8870","sha256":"f5e28bbb3d54aea69e945ea6e24db8d7d9e1024275d9278b0ba4118b17a29c51","sha512":"47ba4830e4111c0809203fb0c7903033e987301da2a6ba7725d0bdf81634ea66ce3e3528a11458bfa5a7188fcc71f6d80c19e7e71d64793b4a0ed72d2367f972","ssdeep":"","tlshash":"fd6000300000f3c30fc0c0300030000030000000c0c00000030cc030300f000f0c00f0","first_seen":"2025-09-29T13:35:28.335273Z","last_seen":"2025-10-07T05:07:39.187418Z","times_seen":602,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":42,"dns":0,"connect":2,"send":0,"wait":96,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/65a81af1c0267b4625b151e9_GT-America-Mono-Regular.otf","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /65a81af1c0267b4625b151e9_GT-America-Mono-Regular.otf HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/common-website.webflow.shared.fce88bee2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 74868\r\nLast-Modified: Thu, 02 Oct 2025 03:24:53 GMT\r\nConnection: keep-alive\r\nETag: \"68ddf085-12474\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74868,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"de6fa190ed9a266ff3e8cb5c17fba126","sha1":"a4642361aba33dfc05a6fad7e5368d9df45653b4","sha256":"c8b7827f6a0a137d14ab3b0c250f79805e4f4f46e83f04420cffece0257ec4ad","sha512":"55ce6852153ee5d511d24790c54cf89d8fc5f5d67d99b2cf98853edd33d53aef71b71c866f45e851aa8dcf6b22e63cbf0f8687308542ff10028ba35f24e93267","ssdeep":"1536:hE+heO5Eu5xD4sY1WrDdveunANRB8Ty/a+YaYaWh1CcrE13F:hJhvv5OsG0Ddv/nANr8Ty3Wh1DrE13F","tlshash":"d973bebabb2bcb89dac10ef712b617e07757f42c962fd61b9e4ed4585cc10580b960c8","first_seen":"2025-09-18T14:00:19.520521Z","last_seen":"2026-07-08T10:42:00.748175Z","times_seen":22,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/ui_03.mp4","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /ui_03.mp4 HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 358047\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Oct 2025 03:25:27 GMT\r\nETag: \"5769f-64024895037c0\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-358046/358047\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81621,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"5a9f035577956df2f10a196f7c520f57","sha1":"7bcd4814065bffbad760fa911ee0aa8c8389394b","sha256":"3317f2a56aebea50d8570ca57dd4815c097d3b11e3cabeaa3e8e70eaed423b9e","sha512":"25b53c0ce7f2ee3f202bd4a9e21f2f11d4629f12f629d05b5cad5237c14790954c1cadeddb1e3fd31ed2f4164d16884ca96dfb98ea2830e0360a82bee0699aed","ssdeep":"1536:CCB1QUf+9d2HQ5gvgUV97usbtSp7lIKw3KKo37hk+gFe9QYptPULIIpi:CCBWt9d2H3vgqus4p7lb72e9jptOi","tlshash":"c583f14867e0bd42dd00933f10eb63b232bccb778d5b078747d9ba628d065da52296dd","first_seen":"2025-10-07T02:47:44.610111Z","last_seen":"2025-10-07T02:47:44.610111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":16,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://commonlabs.xyz/\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lguEL4RuXCzF5EPAyLH77%2BwUqRqhMcAW6WpGCZzMbj14J%2BHRlEHE4gqRefCIw3nP6ijfwKK2kibPYPiaCDlF5r%2BAyOXZbR%2FnexRqsvbsgsSh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98aa129b7bb5568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":873,"timings":{"blocked":201,"dns":15,"connect":1,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://commonlabs.xyz/\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncf-ray: 98aa129c697756b1-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/common-website.webflow.shared.fce88bee2.css","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:10.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /common-website.webflow.shared.fce88bee2.css HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:10 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 02 Oct 2025 03:24:51 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68ddf083-1faba\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129722,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"362a447910498f25a622fcdfc8c87d47","sha1":"be74f0f14ff5a3a3222ff80e14ed64606fd4bc42","sha256":"71a0a1a96290fd513f70dd6d7c7c25dfb92e691bf1af76bfd5d6533920c0a2cf","sha512":"98c8dc725fcbb9fedb814eaace864b6c038a9600a97298a33fa76fec2129314487fb9508b60ece607cd4e2a1d29c400869a4d063ff70b8ed3a8c22dc94dc0167","ssdeep":"1536:Ay7EeqyP0XcPyjowejwA6e8cQhc3mrlI/Gjt3VIi64LghklvJQXv28LbU7UB:4yP0XcPyfA6rcWr1P64UhOmHYQ","tlshash":"ccc342857bf12408b41f94a5d8eba654b32a8483c74fcea6b9e0305ddfc82d51873f98","first_seen":"2025-10-07T02:47:44.612235Z","last_seen":"2025-11-04T03:43:31.360826Z","times_seen":6,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":31,"dns":0,"connect":15,"send":0,"wait":33,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fjsbarcode.default.cjs.js\u0026t=29330087","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fjsbarcode.default.cjs.js\u0026t=29330087 HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:20 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD, POST, OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342552,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65428)","md5":"24404746a19282e59647a86b7e141a22","sha1":"615f3aba285976877691a28a6fa05ab94572dcc5","sha256":"9414e2c983ebb430480803c5e608a2b747f8725aefbf8e7f137b2ac7f916803e","sha512":"d870420943e56e1a8e5756b0bdc7c2cb26c58639c7dc1911df1a109eed1b8ad88dc1ec23e68ebb65bb934abf710746dd63af61f558b09b799d20f43d06df9afa","ssdeep":"6144:UsWR+jpPUbczk6p1ZsJzO3fXefpvVBtcaovA8C3Iq:RWklPQUWCvXefT38o9","tlshash":"90748c917280617916634fea41bf094ab238f120a409892cf75cc8d71bb99dad5bff7c","first_seen":"2025-10-04T13:20:57.139939Z","last_seen":"2025-10-08T22:43:50.294317Z","times_seen":59,"resource_available":true,"data":null}},"time_used":7035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7006,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/ui_01.mp4","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:13.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /ui_01.mp4 HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://commonlabs.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:13 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 195487\r\nConnection: keep-alive\r\nLast-Modified: Thu, 02 Oct 2025 03:25:13 GMT\r\nETag: \"2fb9f-64024887a9840\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-195486/195487\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81621,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"adee34d7ddfefae2a7202e3a2afc8ee0","sha1":"9191a4d5e1aa022e884987fd6b6de77a8b3d140b","sha256":"3f81a1bcb4526fac0c1e1487c09b3a898a414baef77b79877e15bd6254107a2b","sha512":"1195c2d6288b8faa12210b28cff56790b5b947d535b1f51b9d7c3952b834c112154b070d8230b364b51a7a401497d987dcea0b436eedcb4433a23571a59f6f9b","ssdeep":"1536:PYbJVMxd8Op4+X2+XZ4ANZbwtDAkSV6r5rrb2JhZ2IHExodD1sWDd2:4yq+X2kxeS8fJxodBM","tlshash":"5f83e03a7bea6902de79137f9ad247a4bbdce699428713d39318a0070c493c1771d9d4","first_seen":"2025-10-07T02:47:44.614823Z","last_seen":"2025-10-26T13:57:52.866046Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"commonlabs.xyz/secureproxy.php?e=ping_proxy","fqdn":"commonlabs.xyz","domain":"commonlabs.xyz","tld":"xyz"},"ip":{"addr":"87.120.107.110","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"commonlabs.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 18:22:52 GMT","end":"Fri, 02 Jan 2026 18:22:51 GMT"},"fingerprint":{"sha1":"1C:83:7B:7B:AD:88:BC:D4:EA:2C:E2:75:F7:77:9E:C7:A3:8D:2B:7D","sha256":"FB:45:14:F6:D6:34:15:41:19:C9:EC:CA:5A:B0:17:4E:A8:61:E2:66:0D:2F:46:B3:34:F5:C4:EC:FC:FE:94:51"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: commonlabs.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://commonlabs.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 07 Oct 2025 02:47:14 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-11T15:17:05.09988Z","times_seen":9032,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"commonlabs.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://commonlabs.xyz/","date":"2025-10-07T02:47:14.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 11:18:44 GMT","end":"Fri, 21 Nov 2025 12:18:42 GMT"},"fingerprint":{"sha1":"7E:4B:33:A3:C6:27:AA:84:98:FC:53:87:7F:CB:E3:93:C1:A0:43:E7","sha256":"8B:29:3E:66:3D:E6:CF:19:E9:48:1D:C2:39:D5:7F:CD:33:ED:88:58:61:61:D7:B7:82:B9:0A:E5:01:B7:17:0B"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://commonlabs.xyz/\r\nOrigin: https://commonlabs.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 02:47:14 GMT\r\ncf-ray: 98aa129bc95556b1-OSL\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":248,"dns":42,"connect":3,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}