{"report_id":"4de8b4f4-7c2b-4db0-acbf-eb0e7be2b585","version":6,"status":"done","tags":[],"date":"2026-02-14T07:24:59Z","url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"104.21.66.190","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"title":"Midnight","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"104.21.66.190","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T07:24:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"midnight-update.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-01","domain_rank":0,"first_seen":"2026-02-14T07:25:02.681635Z","last_seen":"2026-02-14T07:25:02.681635Z","alert_count":26,"request_count":26,"received_data":4089534,"sent_data":12865,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React:18.2.0","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"midnight-update.com/react-18.2.0.min.js","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c7c5ba3de86a6831736cc197459a0c1","sha1":"3b64303b775e6c863e284ebfee396423fed00138","sha256":"f9b9aeb6a1b4445ae9d5f7290a6e85cd1af902575d64d175ade10719d824b6d1","sha512":"1fd89ea9f80f247efc1399b409cc13501bfc0538bc678cefc46a2e3ae4c70f06736407b3e8a3d4b62747135c55b4f9a4d5daabaf6b413d56e368966bf602e8ad","ssdeep":"768:VIsWEcotW5/tGRaZupln5uZh8EeHaqkv7p23Ek4IVUdOnDrx0urucNwDcPc11cTc:c51oNl5uxGY92ifWDreurukkrUNJg","tlshash":"8f7382d6990bd0e88e5124dde437ed15e4280a63cdadf1a3ba2cdec1b41df62c48753a","size":77572,"data":"","first_seen":"2025-12-31T12:29:56.281995Z","last_seen":"2026-02-14T11:04:14.437682Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-07-25T05:54:56.769242Z","times_seen":3156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61c43db82df871fa0869c2d95effa45e","sha1":"39269da0315b62404cdc1dee022ac3053f0808c9","sha256":"8da8931498eb4f12ce99d17c4c562daebd086a035f85c0768675683bbfebb36e","sha512":"2e0a87095439aec2cfab4a6ffdaafb3451bbfd97b27194b1385e09b188cac078cf62ce1703f671026b3c3a1e537d58df8bff01828d95df9dcc888ed20d8069f5","ssdeep":"","tlshash":"a4e05e5820f1566200db283d4acf645e7a25e413a1088dcebdccd714afa5e6c10e1a88","size":317,"data":"","first_seen":"2025-12-31T12:29:56.296157Z","last_seen":"2026-02-14T07:25:46.781824Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/a4aa3dfb-5115-446c-98c4-dc73277e125c","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"63eb327e7ac0eaa93d4210c52f286bb7","sha1":"7c496f2136ab9df33df6fff2d970b0906bbebb66","sha256":"60d9036c24359d089b2d8fed8d803e0198c74f43ea75f8fbc6445d731cd12072","sha512":"639e91b3add2b2cbb30e59dc4df4c21aea478e76a170e1975a82783791f845f85628d4939fb1cb523aa5de02428b618aa79ece69fba1607a3c79d69b4340911a","ssdeep":"49152:aWGkwdNZngkVJbwW2QUSvhjG+EyY4bfO3xrQanJfCpszVt0r0T0:y","tlshash":"5ae523d26d5798b5cf84025570eb5e0b28990c13589db1eaf798f9c234aefb0c0e792d","size":3319672,"data":"","first_seen":"2026-02-14T01:57:13.918386Z","last_seen":"2026-02-14T07:25:46.788389Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-25T05:54:56.771859Z","times_seen":3123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-25T05:54:56.783266Z","times_seen":3328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-25T05:54:56.767736Z","times_seen":3369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-25T05:54:56.781451Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-25T05:54:56.780773Z","times_seen":3283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02e42e26f2d4efab14905fbfb2978c10","sha1":"df88d0803437644f779e66b901f4fc17228b4c3f","sha256":"b8752c9eee3f04b9ff94552a2d0b7bd69e32ce7435ca3cbd1c7b42db66815f0d","sha512":"b10304fca1385233ff2a446d080a870cf86f68f5679f1b232b3701ae14eb78c7c2bd5a93ac2f74213f458d2f101dee0ec9f33dc32563cdcf1ac764579dec311e","ssdeep":"192:w8kdES6CMz8feKSXCcuUS6C95btjOSI3hrZUMKftymJHvCY:w0z8fm4pjk4","tlshash":"78d16d6d9f92063798abb5bd8f9bb080292284275909ed303d4cd142df8cd3997f6f94","size":6752,"data":"","first_seen":"2025-09-09T17:13:15.573075Z","last_seen":"2026-05-30T00:29:45.391982Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"17e556e82f33808725845f6c249b855a","sha1":"829928d6ef6470bd90ff306d1149ab3eaacd5415","sha256":"5b9d622cec227b68895447f8301a4b484cef58d640c77f6a3f508ebab58e2305","sha512":"cf52aa77932892e30cfd66086a5c3bae5c05a1e6210ee10a04b5753316066991b0745c8d26ac6c2e5befbd729e00d7e40e7f1bcf0bd67a90d348bac0d870d6f0","ssdeep":"49152:ZGGkwdNZngkVJzwW2QUSvhjG+EyY4bfO3xrQanJfCpszVt29sxB:g","tlshash":"5de523926d579875cf98035570eb5e0b28980c13589de0def798f9c235aefa0c0eb92d","size":3317215,"data":"","first_seen":"2026-02-14T07:11:11.128298Z","last_seen":"2026-02-14T07:25:46.780224Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"midnight-update.com/da53325d50895429285f938389f1bdadc214fbea.png","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/index_6.html","date":"2026-02-14T07:24:36.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /da53325d50895429285f938389f1bdadc214fbea.png HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 683\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: \"6956e9a2-2ab\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9m87wCeS4F9u8%2BDu2aEBuWQCNbzFrC6VuuiQ4ko4Et38WQrmr8hV3PiXsnytgkdoXZnSYOsTzZu0nDkemGQAAG6L2gOcYS1w%2Fk76j2AVgYIr80%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a77f711a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":683,"size_decoded":0,"mime_type":"image/png","magic":"data","md5":"efb32ceda324e1612abe80b50aba63a3","sha1":"da53325d50895429285f938389f1bdadc214fbea","sha256":"f85b1a6a1cd2123c5064ad974f5d42a28ee55c6a2dcd4318a661c0a8958bf525","sha512":"57dc56c4f03d751825761c30ab51c0699da3c899f48dd8f74095c7ca6945f1b459ef202606de2cb20eca22336b7e8b054f3aa58447e3bc0bd64049b5b6807a17","ssdeep":"","tlshash":"0e0144181aaa1e6a5460b81bac61d81af566f0a408d003514a9855f15a23cba9406cba","first_seen":"2025-04-29T17:20:25.822726Z","last_seen":"2026-06-27T23:20:48.718076Z","times_seen":143,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/index_6.html","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /index_6.html HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vB%2FdDIhdNowPo8skIL8ajsfPpyfGEVlmpLrs8SlJLmOJBhm5Ye4kVxhF0xYIJE3FAkIwuCH5sXCtmli0qz0tS%2BGkewPSrbYDc4iApCxtcSORmJc%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a49ac01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18998,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1793)","md5":"c3499c222044708410b422220e0b9003","sha1":"6de3664ad5217f8bf4a37e6b620ba8c2ab7b0b2b","sha256":"5bc5ab8c41737494886dd9f28a98cde194a30c72d57efb6a2900ebbb4519b746","sha512":"aa9fd30a15c835c1bf3f7b0a9864a404bb026f6251951f185547db3f3c815bac7860747e5fee6b2a0167137094ae83cf171d3aaf848c862501d3554686d7e01c","ssdeep":"192:4NHQs+B8Wsq52bqGIwV4Ds1yFQPp28hsqO2bqGIwV4gP19ZQTVS89sq62bqGIwVk:ZLQqY4oxfqY4JRLqY4OBO43U","tlshash":"378292600817040197934ce623ce7f38fe5ea244b2429171bbfd571fadcbda692a939d","first_seen":"2026-02-14T07:25:06.08945Z","last_seen":"2026-02-14T07:25:46.761681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/adsct.gif","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /adsct.gif HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: \"6956e9a2-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BoV8ECmxgvJh%2FmDi46EuDVpe0sUdhzE6G64tqXypEl%2FFf3aidq38jr6KBlz%2BFdGawqKf0Ba7TBwXmncQw%2FFB4O5WsT14sqEFFxcbbWuh4P2Usjg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a1be181a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/index_7.html","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /index_7.html HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2niybbtSfzndel%2FrOMLMlGQbbAWHy%2FHRiL06O7PhXcBC1KWMxXFtEwwHeF2AGgdUomP%2BmG%2Bio22T0GTuEvs6%2FybTHGUI7TPokI3EvLstnfAtq30%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a48a531a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":506,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3a5249f7f7f5fffb9145fd62047efa6a","sha1":"2aca7a3d8f51863042687ffbef68228d2779fd2b","sha256":"f3ea5b98ffd3acfed73e208093582b4ff952f5fa522b0b6ce2e5cb9a70efc9cb","sha512":"836b4d243337ec9ce2704fbab44ac11d56a884add234a30d835043ad707efcdb69ed85035fd5d3467cb5a6a772be0d05b878c862d667c479013af5878b18cc9b","ssdeep":"","tlshash":"e9f06882e202300a4915f2b02dd0fa44044bab19f6928c43a6a8e0709c493eacc92858","first_seen":"2026-02-14T07:25:06.09484Z","last_seen":"2026-02-14T07:25:46.759627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/index_3.html","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMKoKzjIQfan6eQOaOy5TKJ8eFLmbf0HGlOnAMxhlw4McSHi3qhCNgz2WZGrS%2B8DgxMxCU%2BqoL38dSpN5hs8lqWrLeyjUl%2Ftud9Ab4BtuYYBzu0%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a49a931a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"2ebff255a2da26d143243db6b7ef7777","sha1":"d18be4d066259b4832b351205718a6bcf7f0d4b9","sha256":"7d7681a70292c68bdaac4ef3f740fd97e22afd1b4d8579b94b1ce6dfcd34fc5a","sha512":"287f0cfc60f913700d7fbb7a2d2bc9a781b3e6ad34ede44a191a9227d7e31a6b606376043ce6ec2720d605cb5b79e351999ba06de98fd4d5939991db999b3ab0","ssdeep":"","tlshash":"bcd02272d506040ecc019ae18beae28c4442d92cb71059186df477609a4d2238422b6c","first_seen":"2025-10-27T17:05:47.171427Z","last_seen":"2026-02-14T07:25:46.764552Z","times_seen":5,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/_.gif","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/index_7.html","date":"2026-02-14T07:24:36.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /_.gif HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/index_7.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: \"6956e9a2-2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1bm4yYiQTgo9kIItHvyEbwh3WI56RjvexeZYr%2BVV1BjedwEXVt22KUYN6PUHTKKI38oC5s3AilSqBSMPX4qzyt1jAWEQIJN3FLD6LyrTrDxtyA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a5d8991a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-26T12:24:35.325914Z","times_seen":1009561,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midnight-update.com/index_6.html","date":"2026-02-14T07:24:36.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/index_6.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: \"6956e9a2-9cc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vRLWG9sefQ2Z0QmlIvdC0FKTL%2FhZyvq%2FZmV8tmSPLLcpH39886hr1UhmKkSn9ke70NT3FczdkxdGudQWvaZ83LzjLp3yCxqFr7uHfEf47nKez8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a77f951a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-26T12:23:14.153288Z","times_seen":946265,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/4006d6b40ab4f7c3.css","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /4006d6b40ab4f7c3.css HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: W/\"6956e9a2-1d7b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nMIO8FpjUKHFClyv1Bt5rSMrrhuX0hKnwSi2nDV5g9b6uRGsZpPxQzD0v6KvS2acvU%2FbCspNkc4x0i7YwiHgD0YaMtdYNOhIUD%2Bv8eAVFrU6%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a1ae0b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120758,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (33123)","md5":"34029152ab6f6a22218198731765e2bd","sha1":"639763e8688abdcf14d3f76710822eb0253213fa","sha256":"7b76f0533e10e040f59dfab7531be79179cb4dd050a2dfcd5ed32cecfab7316d","sha512":"97f7fd3c6c86caa5b10c11afb32d16684c87604686af87e7610c036ec4ad8004d10308cb3f862f4dfa333991837345f632881d1a203d815d6e0f5a91da1373c0","ssdeep":"3072:7O2j2d5xEFDCtai+Fy9Kh1CfedQf4jWVlqSS7nLyfh8QYvGWUxlupQewgxVeJb:hj2d5xEFDCtai+Fy9Kh1CfedQf4jWVkc","tlshash":"15c3d92e7740321a1c3789f3e2d2a9dcd62a99c1af3a56f7793215144fe82e71d13a4c","first_seen":"2026-02-14T07:25:06.102725Z","last_seen":"2026-02-14T07:25:46.778615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/index_4.html","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynjPa5RXfSNz77ma6fWWt2ft19%2BzSWevGfbZX%2B9febrHL8xwbDSIvTvS38dJHLQqYZbMDs7LEcUzAhYFWniCEsWYgiqEjQ9TxYLQwf6tjWBgwEI%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a4aadb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"948c3b0b89a440438cb10c44dfb25fba","sha1":"e4d35e5e283c4cfea043a022a3b06f0e85d231eb","sha256":"3de2c358acd98dd93f54af55a7d89ae64cca5757d76fb95ae74db8bd63389bdd","sha512":"fb5a9b43f60c13b8fa0fc50299d4083c2d3d1534753b8dc29871250020448c54f220d9ea2cad18d8515ece5afb532d23486cd870bce845d2b2d3d22630c9b7c0","ssdeep":"","tlshash":"72b01276d811080f6c50afe0cb8ae1c48400d838f0214c047ca5b180dd9c132c013a84","first_seen":"2023-04-07T21:29:48Z","last_seen":"2026-07-25T23:58:42.945459Z","times_seen":1132,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/551f8492831e82d60b9d7a5d294faf69ac0a3e1b-69x69.svg","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:36.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /551f8492831e82d60b9d7a5d294faf69ac0a3e1b-69x69.svg HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMB4NrLaM6fuSFLhw6Q%2FTYE2gmj43YXynlxCIo6sz17Em9zM1I6Oru76UdANuokDGvMZn%2BVUwORvERVA7GkMAAq0TGF%2FqkaKBjiE1H2dvZRciqE%3D\"}]}\r\netag: W/\"6956e9a2-352\"\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a52d2e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":850,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9c2387c6a15aa02cbf40448b25a8522","sha1":"5490d5a427ebe1af184892bd1c1d8d8d5c369f97","sha256":"329dc7e9d202f5ce0f26119825110f42fb6b06c4c4ddbc19437691168b64996d","sha512":"f0e4f6cd06287f8e5fa0fbe194b5316d4d11a78d83e762b7caf01012574695569e85e36ecb0004cd9a3ea349858619af107cebcd237b52e934bb64a81092bad9","ssdeep":"","tlshash":"7b01af54013cdf4aa5619bdcc9ef9197e82e65c66784cce9e31024a9f8829451843cd6","first_seen":"2026-02-14T07:25:06.106324Z","last_seen":"2026-07-10T17:06:27.274084Z","times_seen":4,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/index_5.html","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://midnight-update.com/index_3.html","date":"2026-02-14T07:24:36.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /index_5.html HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/index_3.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFwqhjHnJSbwaKpuli%2Bie9scaqIqp%2Fvc9s2%2F%2B%2B2jvUAFyyl8PmiN1lqmm9TK4DfEjjGiTF8mqf7nfJgcQnTYnr%2BkNVr6esdAFbUC%2F07jZY2T294%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a5d86b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"770913f1ac1e0daf7af8de8d4cdbd90b","sha1":"6f0d117c0660880bb7b159c43a5a474a4224350b","sha256":"42022996581a743ae5aa3828eeaa6adecb1ca9abb6fb8c8f80fc201dbaa7ab75","sha512":"c7cc919c33a62d6d1808805aec949ef7f99bf7ce45c19c5504727d8b472b049feadb1638f655ed55e32bd4d7543e772a7b793f5fc4b2ddad1ccd7b57dd56d8b5","ssdeep":"","tlshash":"5be0f1939320c406065677d23fe1f308400ffe1df4129de4bef554d898ea27be416688","first_seen":"2026-02-14T07:25:06.109112Z","last_seen":"2026-02-14T07:25:46.762677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/styles__ltr.css","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://midnight-update.com/index_6.html","date":"2026-02-14T07:24:36.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /styles__ltr.css HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/index_6.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: W/\"6956e9a2-7e0c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53xBdTiuH8VUuVllYB1yzbn0H76G%2BDrVTqtK%2F3%2FbnqbRDPSqnnCzTNxnEL0eufF0N2mWTEE3CuOKxcX%2Fros5MtmN2f9jBPH735LNCqyuGxtW%2Bbc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a609751a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32268), with no line terminators","md5":"a87a009e0813eb4f980736f6d0f161c2","sha1":"d9c76e2ddbb99b2db33779c7e83e552c45cfc94c","sha256":"eb067d593eb0fce05547d3cf5f3db7745db45028bc8767bc8657a2a15b666ad2","sha512":"d8004e4e0df8dc6b17c793f6ec65f3ebe82176d4e4b7452bc69a193e43865adc847c3fe5bd3ef22dac908cee7a8996e2554260278d4d0a2c848c9a3e202d6cdb","ssdeep":"384:+RcH72/ReA2yBOq+7N54PtSqxaG9eoc+cFs1gYDpLhvPTodVcVMcCCA9J8cEPc7:+75ebyBON54P5xAugYFrVFCC+JVEE7","tlshash":"20e2ca6378903b2af8279b6121d56efdf22cc913e5524fb9a646b630c3cf1994163b07","first_seen":"2026-01-02T23:46:29.890937Z","last_seen":"2026-02-14T07:25:46.766421Z","times_seen":4,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/favicon.ico","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:36.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yv2S2I0HYM6cx9IzUoADwMyyBPBk1DfYHgFdH12Yv392mbeEmvCDIrKAPk5kBhSe97EDi1tGrfqT0ed%2BTHexn84w9dh8JXdrFLvdgfMIOkabCVw%3D\"}]}\r\netag: W/\"6956e9a2-3aee\"\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a74ee31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b213dd050650ba6bd0e19d740dbf3b9b","sha1":"6e7e468714e5f4262bf94a14ad5720215e4980a2","sha256":"21ec0ff7ebf28d0f3026978f417d41e8e05d401ea3c3b0cc5c4ac4378ce25aad","sha512":"063ad6fa0185a33d8432358b88c7ef671122c58f09e9405e3b1b0a146312239f2df71c0f3cbd0071898b943e785b92454d77b745fcd9b9f244196771f8623a89","ssdeep":"96:jf6KY/JSVNjB2Pgo7nq6jV8ZSy8PM17Ht2eqk2lgm:jf6ZhSV5B2Pgo7nq6jkSy8PMP2eqk2lJ","tlshash":"1362b9e1fe8c4467e32002bcd1debb048ab85df9d85fc916d161307629767c32e1e9a9","first_seen":"2026-02-13T00:29:41.889697Z","last_seen":"2026-05-09T07:35:57.623131Z","times_seen":5,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midnight-update.com/index_6.html","date":"2026-02-14T07:24:36.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/index_6.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: \"6956e9a2-9cc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rq5HyUaxYUWjeQg24Fj2lllhkR7WPvRZpP6QGmB%2Fz0PCuFC2JakcoySk%2Fz3cKO5IgL6FTyYfB4eZKBq8LnP76TFd56UxTaVbLLs8DZql9aeWvyU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a77f8a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-26T12:23:14.153288Z","times_seen":946265,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/react-18.2.0.min.js","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /react-18.2.0.min.js HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: W/\"6956e9a2-12f04\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PbD8DQGETHsJRXxVqm%2FSw9lHjje5JK%2F7KDwXPJMuw1FbpRx0PgbqHvLfPoysVEK6fmAShwZ4kn7dRS5hbmPsTHYdPTu5%2BRR8gqV8GsG1CdxRohA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a1be121a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77572,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4c7c5ba3de86a6831736cc197459a0c1","sha1":"3b64303b775e6c863e284ebfee396423fed00138","sha256":"f9b9aeb6a1b4445ae9d5f7290a6e85cd1af902575d64d175ade10719d824b6d1","sha512":"1fd89ea9f80f247efc1399b409cc13501bfc0538bc678cefc46a2e3ae4c70f06736407b3e8a3d4b62747135c55b4f9a4d5daabaf6b413d56e368966bf602e8ad","ssdeep":"768:VIsWEcotW5/tGRaZupln5uZh8EeHaqkv7p23Ek4IVUdOnDrx0urucNwDcPc11cTc:c51oNl5uxGY92ifWDreurukkrUNJg","tlshash":"8f7382d6990bd0e88e5124dde437ed15e4280a63cdadf1a3ba2cdec1b41df62c48753a","first_seen":"2025-12-31T12:29:56.281995Z","last_seen":"2026-02-14T11:04:14.437682Z","times_seen":37,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/adsct-1.gif","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /adsct-1.gif HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: \"6956e9a2-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4xuD61E7%2F4wynL%2Fa6GrL1Nd6amcwdmRKgsePJybY9nmtSaIzQvXMlYOr7EaZ3hwqSlOmD4PGDxBqKuJ6gHSzjbD%2BNK0SP7qVudl%2B0DRlMc6dIM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a1be141a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/index_1.html","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mgV848vVmFpwapU6UMatb0mNg%2FX%2BFyvoXjcoySMshBQUu6vYEIpBw3BCbDuBuh0WxkyqKVb3c01MxdImaruoDvnaLHK%2BEwVm%2BpubMMy3cauew4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a48a751a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"948c3b0b89a440438cb10c44dfb25fba","sha1":"e4d35e5e283c4cfea043a022a3b06f0e85d231eb","sha256":"3de2c358acd98dd93f54af55a7d89ae64cca5757d76fb95ae74db8bd63389bdd","sha512":"fb5a9b43f60c13b8fa0fc50299d4083c2d3d1534753b8dc29871250020448c54f220d9ea2cad18d8515ece5afb532d23486cd870bce845d2b2d3d22630c9b7c0","ssdeep":"","tlshash":"72b01276d811080f6c50afe0cb8ae1c48400d838f0214c047ca5b180dd9c132c013a84","first_seen":"2023-04-07T21:29:48Z","last_seen":"2026-07-25T23:58:42.945459Z","times_seen":1132,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/index_2.html","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMZnk%2F9Bx1SalEpyxQnvCLfMxlaqQmHaNfHcD2kW%2BgcE%2FbfDafIOkHhnS%2Fu1awA20%2BOAZbwmnZPIWIZfBTa0QF7zhHVdozHRTPWayUAt6I%2Bo0Dg%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a48a7e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"948c3b0b89a440438cb10c44dfb25fba","sha1":"e4d35e5e283c4cfea043a022a3b06f0e85d231eb","sha256":"3de2c358acd98dd93f54af55a7d89ae64cca5757d76fb95ae74db8bd63389bdd","sha512":"fb5a9b43f60c13b8fa0fc50299d4083c2d3d1534753b8dc29871250020448c54f220d9ea2cad18d8515ece5afb532d23486cd870bce845d2b2d3d22630c9b7c0","ssdeep":"","tlshash":"72b01276d811080f6c50afe0cb8ae1c48400d838f0214c047ca5b180dd9c132c013a84","first_seen":"2023-04-07T21:29:48Z","last_seen":"2026-07-25T23:58:42.945459Z","times_seen":1132,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/817aedcda0bcd26834089f1493bca6b90c9db330.svg","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /817aedcda0bcd26834089f1493bca6b90c9db330.svg HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/4006d6b40ab4f7c3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5H38oupBAtrPj9uJpl0RSgU9WCEIO5NTrH2wl6ZYQ2dic4tzx6ap9wO6p82OohJW4AOt9BNFj07K%2Fj06ZHGUBP%2B%2Bc%2BwedHPeyCVd%2BuIPHxno9s%3D\"}]}\r\netag: W/\"6956e9a2-69\"\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a4fc7b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c974d5916126091a2cd7f0837a986d8f","sha1":"817aedcda0bcd26834089f1493bca6b90c9db330","sha256":"7e38d12d1da8afb107d374eb3e33caf2f687ca5b10cacdb217affe2905815deb","sha512":"3cf9d0a6d86d3533038013381863b328e3ae15a9499b45daa33ed0d05f2a7fac78d46f1e57b261a804572373de6c8cb98fffffbe66789f0150c1bf72e40f90cd","ssdeep":"","tlshash":"43b012fed1c79d18991884309dbe6800aa1ff04041860354d5b90a1ff2100d232010a8","first_seen":"2026-02-14T07:25:06.11728Z","last_seen":"2026-07-02T13:03:20.147902Z","times_seen":3,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/c8bb8d63015976e320efc84c00a08415ed3bd68c-178x179.svg","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:36.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /c8bb8d63015976e320efc84c00a08415ed3bd68c-178x179.svg HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QA%2FQCyXTcDc9EBg%2BCJHMd0IpeJAInKQ18TZIzn%2FktRcjoEXJVcnt0o93aTcZ6nChQxHA7e%2FcNHOUvfT%2BWDqnhF%2FovydSpjUsAsroMhSuyRB00Hs%3D\"}]}\r\netag: W/\"6956e9a2-1b7\"\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a52d2c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":439,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9bbead2613ca923f1cb2488eb15a2581","sha1":"4d23e402a4acaacd94e39c72da5f51ff28dc33d7","sha256":"66638f5836e083ba40a7c31ef604faca7b95918c6b48490eb9a6ef4a77742a23","sha512":"c5fe84af29d2740f9afe8920aa137c9a3c59145c9bfcd2d1ae92abaff851fbe575c2a04178ad94565114fc81a03f986bf5970f13df3133f7f3dca66fd6339d1b","ssdeep":"","tlshash":"a4f02019920dae9cea140830c65337e2a42fa2326db4113f8c3208bd921255c7adf2b1","first_seen":"2026-02-14T07:25:06.119426Z","last_seen":"2026-02-14T07:25:46.776778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T07:24:35.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Be47X8VcBM6Rr0fWszwPwqEg3AlfuXFEjVeC8UUeEQ57ffoLOhTxe5TtUfVJiaTkhMkiz33rz576FQfgScfO5BxNxzDCW2wz17yDssrCRZXaqkA%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdad39fc8e54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React:18.2.0","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":388807,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (308)","md5":"a5676d1935d0f18b0f517786a0bbdba9","sha1":"60e45d5db220774caf28eb203ebe1a57615d991f","sha256":"1215148a3ecdecb0204fab2ebfd31c61e91cc5b1bf8c84896d4b04414d568a4c","sha512":"95a380a2ad64225487179dd8fae06b4c70f04c6050c1a831feafa37a98ebd68df72f1f4019bf178a344fbe14aae637b175c99be01d64ebc46576787f18debe24","ssdeep":"6144:uC7znyHbYnrZU9vQgslEsn7oTkmvYlbhXsXXwZ6NlNBVkOoNFnSDKSaz2r76p1C:77zncbYnrZU9vQgslEsn7oTkmvYlbhX4","tlshash":"e7843f18e5f16076792b626b138bf68cb2746c535c05cf9cfaae10408f89bff35426a5","first_seen":"2026-02-14T07:25:06.121307Z","last_seen":"2026-02-14T07:25:46.771127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":44,"dns":27,"connect":1,"send":0,"wait":181,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/MsMpvtzV_200x200.jpg","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /MsMpvtzV_200x200.jpg HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4945\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: \"6956e9a2-1351\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3oTcWokmfLH0JiupK0%2BSsG1Jmnp4cjOVrA3L5KoKAerFmYCuopZ5iv61mV%2F9L2pkKJkf%2BfR08iVy5zPKgpw%2FTrbc1PlSoE6oO%2BtrgCOoZZNpT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a4dba91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4945,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"f93087cd28b467c804c2f1ba527255de","sha1":"ce7f530f4b31fb0bfe2a7c8fea5660ef5b13411d","sha256":"0fa5469ecf84d430588e6212564161f55ea0a443941ea1fcdb6f6bead57d51d9","sha512":"d726271eb8df23d2d90c8b2943ad2607125ffbe993e9182d9e70159f000ab8b084a6874a41ac3c1d9c545dbf8b0070566192abe87ad2f0fc9f2d8577b653c7b5","ssdeep":"96:X894v4vS8+CB9n7R+j3pr4aZKNahmvc8/vNlwoLF3nu4B:sFSG7kjPfhmUwN1ci","tlshash":"78a16b721f082245e59d133458e5a77be3f25e273790530bc98269c63f7c0c2ae98ad6","first_seen":"2026-02-14T07:25:06.123419Z","last_seen":"2026-07-02T13:03:20.135822Z","times_seen":3,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/0e27e1fbdbb1cb415485364e3d15b5c58b1a982f.svg","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:35.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /0e27e1fbdbb1cb415485364e3d15b5c58b1a982f.svg HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/4006d6b40ab4f7c3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxoJcnVI9%2BTTfJLp1lrnJW8PKHmm6jl8sL0KNGkLaB%2B0uayi09CwjgsZMdpFAzZkCPkbiCFx6Da6jjN8AOetJXMJt64sGiQKyEQIGqESOl7N8uw%3D\"}]}\r\netag: W/\"6956e9a2-681\"\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a4fc6e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1665,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c69f0f46ae955fc55ace3a8ed5ee227","sha1":"0e27e1fbdbb1cb415485364e3d15b5c58b1a982f","sha256":"dc317edf7f950f8583171813a0771dc9a14726cbb77abe0c26923fe329796ba9","sha512":"b49d945538f55d495c7f3275dd56aa8c055db9974d8be5f63c2bc1b3a8dd129abba44728bbaede90e1cee2839e850997b7866254aeb5826395a04bcd06e2ab68","ssdeep":"","tlshash":"3731fee92354128c979be90dcd7a48647f5ff0b9bf4e4b8510af8f332087185db86829","first_seen":"2025-08-17T05:12:00.588523Z","last_seen":"2026-07-02T13:03:20.09296Z","times_seen":6,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/secureproxy?e=jscdn/getFile","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://midnight-update.com/","date":"2026-02-14T07:24:36.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midnight-update.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://midnight-update.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"llv87110erlt8oxbggd7\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jCms6xHifgZCIQULdMkO%2F76UteIJq2S0GCJ5Bg99RklUjEwbnTOL%2FXF1BSX91XBeHl67dP8XnvKFdj8Xndan%2F99gc8jSY%2FEZr9CKqNhS5uforg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cdad3a54de51a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3319672,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b03744394bfe0a792f088bc8dc1f72ca","sha1":"5643cc678d310bfaf89ed9f5a041c599780bc74e","sha256":"1635f39f28512ff3944de20e502f36dd6849139c97f1c21c4e57bdde72a5c198","sha512":"8c5c9b456ce10d7c5460b910c38bebd75e42ded800d3689dbb86f7126dec6e06bbf40a3df0a46a6c96d39d8105fdfac19192a001eee3e5b710928e608fddd501","ssdeep":"24576:a4b/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeSU0DSWOr:aWGkwdNZngkVJk","tlshash":"092523e26f5b9878cf9c1e99a0fb1d4e2c440d035089b5fae596d8c33269f7041db93a","first_seen":"2026-02-14T01:57:13.903412Z","last_seen":"2026-02-14T07:25:46.777828Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":530,"receive":746,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/index_8.html","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://midnight-update.com/index_6.html","date":"2026-02-14T07:24:36.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /index_8.html HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/index_6.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTdXdXRfUARvb%2FkfFtDDPNinJDSN6IC1YJTIemio9RKJA4EJ%2BIJ2wI2eqE3LLZtZ21F0%2B8HuOQjArKoLCq8dti4WxcDN5dOLMvW72Pmu90LDhNQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdad3a619bd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-07-23T13:59:00.910994Z","times_seen":482,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midnight-update.com/logo_48.png","fqdn":"midnight-update.com","domain":"midnight-update.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midnight-update.com/index_6.html","date":"2026-02-14T07:24:36.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"midnight-update.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:42:09 GMT","end":"Wed, 01 Apr 2026 21:40:45 GMT"},"fingerprint":{"sha1":"51:F6:2E:1E:D5:CA:D4:37:66:C8:24:E3:64:4E:CF:C6:9F:54:40:DC","sha256":"5C:6B:3E:62:FF:BB:CB:8A:9E:D1:EA:B4:22:D9:D5:B2:86:78:EF:C6:5B:2C:B7:A8:EF:85:B5:95:55:98:7A:C8"}}},"request":{"raw":"GET /logo_48.png HTTP/1.1\r\nHost: midnight-update.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midnight-update.com/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 07:24:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2228\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 01 Jan 2026 21:39:46 GMT\r\netag: \"6956e9a2-8b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxQTGfHDhXm57EaAJLQUOQJ6FsIgYq3Tkblk5Xyf%2FIywzYQ%2BLhkYeBJ03Gp7kMGcLzg9I5UtA1YuW8qAM%2BNa3yrxPwrpyrUekQhF%2Br6oaChN7uw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdad3a77f6c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-07-26T12:23:06.908931Z","times_seen":696264,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"midnight-update.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}