{"report_id":"53de3c78-7227-43b3-9bf9-37e5b6fc6537","version":6,"status":"done","tags":[],"date":"2025-10-11T03:57:48Z","url":{"schema":"http","addr":"i.top4top.io/","fqdn":"i.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"65.21.235.194","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"top4top.io/","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"title":"Top4toP | مركز تحميل و رفع الصور و الملفات من الخليج إلى المغرب"},"submit":{"url":{"schema":"http","addr":"i.top4top.io/","fqdn":"i.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"65.21.235.194","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T03:57:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"h.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"h.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"h.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"h.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"i.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"i.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"i.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"i.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.top4top.io","ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-19","domain_rank":0,"first_seen":"2020-01-05T03:15:20Z","last_seen":"2025-10-06T02:05:13.644469Z","alert_count":51,"request_count":13,"received_data":470688,"sent_data":6077,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h.top4top.io","ip":{"addr":"135.181.63.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2019-11-19","domain_rank":4401933,"first_seen":"2020-01-17T03:44:59Z","last_seen":"2025-10-03T20:27:14.223203Z","alert_count":4,"request_count":1,"received_data":43766,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.top4top.io","ip":{"addr":"65.21.235.194","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2019-11-19","domain_rank":5291606,"first_seen":"2020-01-25T08:04:01Z","last_seen":"2025-09-26T09:47:18.542962Z","alert_count":4,"request_count":1,"received_data":22515,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"top4top.io","ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2019-11-19","domain_rank":82282,"first_seen":"2019-12-01T07:20:12Z","last_seen":"2025-10-06T02:05:13.662838Z","alert_count":9,"request_count":3,"received_data":66612,"sent_data":1455,"comment":"","tags":null,"fingerprints":[{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-10-05T22:17:33.15614Z","alert_count":0,"request_count":1,"received_data":96772,"sent_data":440,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-05-31T18:35:16.924083Z","times_seen":75973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/javascript.js?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc52cee62c015e4abc6d4ce1da9238a9","sha1":"caa5a19a1edd47c178c9b4eb5c0641002047bae8","sha256":"d0b72e5ac7e5041381c1481e6eae72cd7fefc9e93561f8d61098915dce55ff3f","sha512":"3311c2d4bac866e60f87ce071a0fa2a5eccec7f79922e86aced205556faae20953eeba3bd93b6a01090910c0b1374c93433fa6bd868506568e752f0f29a3c488","ssdeep":"384:gLeHdiWgtLnJGLePA1Acg9Yppy2CbZptEJ4+p1rpGSdvegK3y7P2s34oEHand4Hd:yWiwi2aZpiRm3y7P2s34o+aPdr+TUUmG","tlshash":"2c7264253fd712b34113e07d1a8fa2c5f624806faa6165dcbdbc85d49f60bb106adee0","size":16039,"data":"","first_seen":"2024-10-29T18:06:29.044925Z","last_seen":"2026-05-24T16:52:47.117026Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f2436df434fa32a100c86b0d469007e","sha1":"7bc404f2561561c46dcf22496f23f552859694a0","sha256":"8611685568658439deafe99b1cee806e82135b02ef9fa532bbb44519a24995a7","sha512":"20e44bedc1531c43ef9acfdda38b8bdf02585933e3700d63028a44ff5568aa0dbdf297b59c8e31b27d7dc4c84dcc675a25c11a923a0c88bf008c15a7e3531027","ssdeep":"","tlshash":"17d023c0815070e100712f7e34af75457ce13cc7290ded045042445e97559715aec530","size":210,"data":"","first_seen":"2023-04-05T04:43:33Z","last_seen":"2026-05-24T16:52:47.127658Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-31T18:30:33.855596Z","times_seen":909011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/ads/adpull.php?n=1\u0026w=300\u0026h=250\u0026call=js\u0026t=banner\u0026divid=7787112109","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fd94975819b02f5bafdaf5505ae4e68","sha1":"4aeead629a9c9ea6fabf85e0e3f4b4dfa97b362e","sha256":"3148d78a9526deb16c092d9bfa582d764645258072829866a4369bd0dc969b71","sha512":"8286e6b5d640c308dadb8c01ab7f51e3366a7ffb557bff497c9d939e992c6109e84454760522415c4cd4dadd7935e78f3a440bf6041acf595139a80cdf5abd29","ssdeep":"","tlshash":"e4e020a2a78865b555875278d170d6d59510b1008643bdd8da7013f181542bd0016558","size":334,"data":"","first_seen":"2025-10-11T03:57:50.260688Z","last_seen":"2025-10-11T03:57:50.260688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/sandbox%20eval%20code","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"d1b09b13a650156d3f1166b1b951a003a1d977055fb75501f006005b1440ea559dc194","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-05-31T18:35:16.914523Z","times_seen":78441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"622a194df552267ba06d4fe316f30723","sha1":"83c486226caf84710a3f8df8ae4abca9f0c4f823","sha256":"41527168c08dbcead8facb0955ff5c25d7129c7001d4b0cec1c868e1a5bbc39c","sha512":"f7d8ae361c4a48ae8a5ef81361f78da7b9ab2325870ef4329c3f8a927e20e9773488d1abcafcad5969238b080ecd10d5993f59cbc3f6e41e75d0b1da9ec8e5a6","ssdeep":"","tlshash":"d1a00273f0c28c7e4032b144227a3508b943011e82909020764d08709f3708ba5044c4","size":65,"data":"","first_seen":"2023-03-07T14:01:20Z","last_seen":"2026-05-30T09:57:44.706354Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-31T18:33:59.125499Z","times_seen":51325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/js/bootstrap.min.js?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"281cd50dd9f58c5550620fc148a7bc39","sha1":"dfb8410ffc10a57d69b81620087c5a0b6027765a","sha256":"484081bfe6c76d77610eb71a6e71206fe5304d62c037f058b403592192069306","sha512":"9c17bf30056771ad1b0889a68b6fd6cc9a060a069438c543b535c55d4731b8bb852d473714674ec7c2d1dbc5b1828714ba67780dbe64e4fa63ab3d4cd488f2d4","ssdeep":"768:A1Rp/uRE672wlNgDMlb0tGe9+jS1s8ep0sEQUrXf848GfpZ/WQ:ceRx7oYlS1Wkv8epZOQ","tlshash":"4af29546b27031a107efb1e5415f020a72396a6ee90690bc38a5daf53db9c48317bf3d","size":34653,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-31T12:36:22.873724Z","times_seen":1606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-31T18:29:04.867549Z","times_seen":32575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/js/the220px.js?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"215c1f7ec52ae6d5cca90c7347493c61","sha1":"ed0bd7311ce627cd7b6e26dc6c5cc167f3191e42","sha256":"40c9fbe99cfd1912879ec624692a5b4cdc88edec1142bf6717e4b82408467c9e","sha512":"b3c60176fba647d4785c481e538c7c31f6437904641d0de6abb02148d92e688a68c4b6bd07d7e69fc72eb088f4ee9ae2eff5ff08eb30b5d6ef72ee40520e69a2","ssdeep":"","tlshash":"b1f0a410f3605f6690bb64384c1f989c09202942b91f385135f725ed662daac2076f0b","size":562,"data":"","first_seen":"2024-10-29T20:04:43.506897Z","last_seen":"2026-05-24T16:52:47.116333Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c66b23713c34b41fcfd9c8d3859e3d7","sha1":"effc676e205d0dc369d23b887bc65fdc63d707d4","sha256":"61cd0091d8fe448723f9005c8571bd57c6311bd81642d8f66aa9f56d43d4cbd7","sha512":"cfda2292b26dedc7a2f214322a0c73b31f5fe30fa44fcacca830c86bb748213d4780207a3f19bd23c00408ffc365dc4e9aa30eb599e163d59b78f4f418ff526e","ssdeep":"","tlshash":"1fe0c04e347c5ce6997766ff33ba931c74723b05a855edb38a5d899c100199344db0dc","size":385,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-24T16:52:47.13023Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/sandbox%20eval%20code","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-31T18:30:33.862179Z","times_seen":910688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-05-31T18:35:16.924083Z","times_seen":75973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/sandbox%20eval%20code","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"d1b09b13a650156d3f1166b1b951a003a1d977055fb75501f006005b1440ea559dc194","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-05-31T18:35:16.914523Z","times_seen":78441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/css/animate.min.css?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/css/animate.min.css?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Sep 2016 09:33:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57e8eb5d-d0b7\"\r\nexpires: Wed, 15 Oct 2025 08:27:03 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 243023\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6uW%2FJ6f2rET1lTuPDmjcVislhQR2UoDG%2BBfAa2gzfb4v5GKDUOOsh6J19Dmy4ffeEH9abI9p9e1M2N%2Fj7rkfBQ3poRutWc5mYk%3D\"}]}\r\ncf-ray: 98cb6ef21ae35694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53270)","md5":"55009d64191e6f9e712a841773ee6611","sha1":"5f120f4be43d67152bf4bd8f63cca0e027d25a57","sha256":"b48f9a7031474a0f73f92f2e6cbbfad730b5466cda96d86a4459c06efc986173","sha512":"f1aa3a98c4d707119968893b50a8afb85583c3ddff428e6a4b1b7b0d5724e133c030f54a5cbd4ac057603a3a57d870190fcdd8aae29e2aa606ddafd95a456e52","ssdeep":"768:vkZlIbIg6UIsIuIvwO1CA5kiDb3CyQ5xrQe/0STfs2sb:vkZkIvwO1CA5kiDb3CyQ5xrQe/0STA","tlshash":"7933f5af5891228991674f6283dc5e68872dc67714621cde33817c4b8f87fae33da607","first_seen":"2023-04-05T04:43:33Z","last_seen":"2026-05-31T03:55:12.422547Z","times_seen":2464,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":441,"dns":2,"connect":12,"send":0,"wait":5,"receive":0,"ssl":432},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/js/the220px.js?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/js/the220px.js?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Sep 2016 09:33:17 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 18 Oct 2025 01:54:22 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZNIyKI60Y5CZPN7alN20cttHseGNJuu2N2BEWI0FKclNqoosccQ1l5cDkpNwVUZPTCFhc%2FPhYP3mG8A88iZdkmpRFVmvumxTHM%3D\"}]}\r\nage: 7384\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"57e8eb5d-232\"\r\ncontent-encoding: br\r\ncf-ray: 98cb6ef0ea915694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"215c1f7ec52ae6d5cca90c7347493c61","sha1":"ed0bd7311ce627cd7b6e26dc6c5cc167f3191e42","sha256":"40c9fbe99cfd1912879ec624692a5b4cdc88edec1142bf6717e4b82408467c9e","sha512":"b3c60176fba647d4785c481e538c7c31f6437904641d0de6abb02148d92e688a68c4b6bd07d7e69fc72eb088f4ee9ae2eff5ff08eb30b5d6ef72ee40520e69a2","ssdeep":"","tlshash":"b1f0a410f3605f6690bb64384c1f989c09202942b91f385135f725ed662daac2076f0b","first_seen":"2024-10-29T20:04:43.506897Z","last_seen":"2026-05-24T16:52:47.116333Z","times_seen":143,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/css/font-awesome.min.css?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/css/font-awesome.min.css?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Dec 2019 20:10:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e0bab24-578f\"\r\nexpires: Thu, 16 Oct 2025 20:50:45 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 112001\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqRo7TjFzN2vH%2B7CXN%2FDHaJNf%2BLWZk7zFBTEATFxQNlvizgeXFSxJMTIbdbrPxoT88LUTxj0RO7LyzxyggAOiZ2OV29eAa7uI%2Fo%3D\"}]}\r\ncf-ray: 98cb6ef0ea8e5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22415,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21997)","md5":"86402478a873b948418369280beca95f","sha1":"51b348f561fed97ad1bda928e51e5c6b5f369ddc","sha256":"ba55961d7ac71561db39cb5be18d75ee12b453a401d3d7561b825664df464aa2","sha512":"83b386ff253cb861d0f093793957ff44a8e362f214483195c07d75522586078eb61a01e37e8c4d8f6445e086cf2dca2ce4700e6e0e26a8e1de3b27273852427e","ssdeep":"192:sqpJ/8W+ab2edrKeTUKIErArKlcZJVrJ3ee+cR6waWm215bvfwf5DrkHUaQ9:Lk5yWeTUK1+KlkJ5de2UWmyTfwYUaQ9","tlshash":"02a262f8e54d01d66731c48bff85b36862baf33dd5805d99f10f290c29d22a912c5faa","first_seen":"2025-04-07T10:47:25.450062Z","last_seen":"2026-05-24T16:52:47.12178Z","times_seen":120,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":248,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/js/bootstrap.min.js?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/js/bootstrap.min.js?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Sep 2016 09:33:17 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 11 Oct 2025 10:38:44 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9iBwXUZvFnq408J3RgXpu4iBWmBWSJr4K7hZzukc4Ot8aoW020w53LJWsnGIHaSo%2Fsl8Z1KODrirRJrb1IBY6rs8gnvrpg6RlY%3D\"}]}\r\nage: 580721\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"57e8eb5d-875d\"\r\ncontent-encoding: br\r\ncf-ray: 98cb6ef0ea905694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32108)","md5":"281cd50dd9f58c5550620fc148a7bc39","sha1":"dfb8410ffc10a57d69b81620087c5a0b6027765a","sha256":"484081bfe6c76d77610eb71a6e71206fe5304d62c037f058b403592192069306","sha512":"9c17bf30056771ad1b0889a68b6fd6cc9a060a069438c543b535c55d4731b8bb852d473714674ec7c2d1dbc5b1828714ba67780dbe64e4fa63ab3d4cd488f2d4","ssdeep":"768:A1Rp/uRE672wlNgDMlb0tGe9+jS1s8ep0sEQUrXf848GfpZ/WQ:ceRx7oYlS1Wkv8epZOQ","tlshash":"4af29546b27031a107efb1e5415f020a72396a6ee90690bc38a5daf53db9c48317bf3d","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-31T12:36:22.873724Z","times_seen":1606,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/css/fonts.css","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/css/fonts.css HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s.top4top.io/styles/default-new-reg/css/the220px.css?rev=47\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Dec 2019 20:10:12 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 18 Oct 2025 01:54:22 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMRMQ%2FftgmAyZlZF6Z4II90YGODuZLjFqrN9EXsFjMy4z8BeGMWGCh4oRHoeK0itt5ZqvZe1sNXF2yqZOvAugzhLHdL9LMcu5h0%3D\"}]}\r\nage: 7384\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5e0bab24-1e7\"\r\ncontent-encoding: br\r\ncf-ray: 98cb6ef23ae75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a280a44f63927c8634251d8eaddf4ae3","sha1":"46688c0b6945b6480806455ba8460cc6c9a67770","sha256":"c2367854ec3926b2b955ee4f059cf6012057f6a2531f65ab3074692670cb94e2","sha512":"ca7cbad71787e895aea7b829c8ed8366312379181134a57c8b8f8d5988c3bbde1291904bbb33326f340e4a4324c683a5b155101e4daf6e029e89b306e8c70c56","ssdeep":"","tlshash":"38f0e24c620b73b3531224cf27bb8770684a848791c6384dba7c4b544f738bfc261b1a","first_seen":"2025-04-07T10:47:25.445172Z","last_seen":"2026-05-24T16:52:47.115638Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/fonts/NeoSansArabic.woff","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/fonts/NeoSansArabic.woff HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://top4top.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s.top4top.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 117704\r\nlast-modified: Mon, 26 Sep 2016 09:33:17 GMT\r\netag: \"57e8eb5d-1cbc8\"\r\nexpires: Sat, 18 Oct 2025 01:54:23 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7383\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eohxyXkVZkFlIkJpbN3scRNXE%2FgeBQwStzgtwX0sOOVRG9kCprYYk3c44NRhWwYBnYFQPfCF%2Bg9K3zOOBL%2FGSBS0b9kUd%2F4YpOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98cb6ef35d2956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117704,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 117704, version 0.0","md5":"b498aa3e1216f4535f9151fae24411c9","sha1":"29cd31dbe5f513ec673b64314f257a8bb736b17b","sha256":"788559c056a4f64455d4208befee3e58bd6f5d4a92fdb4af84f0fdd23cc32278","sha512":"1ef2d8064ccb26abb6dadaddc0c5474e2187f6a749d3d968255c65df871bb74a1b809c3c0764c6bc2452f2280d7deea3adf202d4cb0dc5edbd6993d63bf17573","ssdeep":"3072:ozOgbecxVmougI4GgNntLo1pAC7Q6PKjSlXR:81moTrvNtcACbHXR","tlshash":"5fb3123d2736054dba5a5bf53ac2b2cfc58ac0c2185d084af1d9c36b512b58af1f5b2b","first_seen":"2023-05-01T00:23:14Z","last_seen":"2026-05-24T16:52:47.112095Z","times_seen":316,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":27,"dns":1,"connect":0,"send":0,"wait":24,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h.top4top.io/p_427vfh7e1.png","fqdn":"h.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"135.181.63.70","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:27.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 00:07:07 GMT","end":"Sun, 30 Nov 2025 00:07:06 GMT"},"fingerprint":{"sha1":"21:E8:F4:20:C5:3A:7C:52:D7:9B:8A:7D:C2:E6:8D:77:45:55:3A:DD","sha256":"98:61:D3:2B:09:AB:CB:22:0C:74:F8:09:05:87:44:9B:AE:E6:41:96:C1:27:59:2D:CB:BE:3B:55:AD:05:1E:A3"}}},"request":{"raw":"GET /p_427vfh7e1.png HTTP/1.1\r\nHost: h.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://top4top.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 03:57:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 43269\r\nset-cookie: klj_40d147_downloads=9nxiv; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sun, 12 Oct 2025 03:34:07 GMT\r\nlast-modified: Fri, 03 Mar 2017 15:22:29 GMT\r\ncontent-disposition: inline; filename=\"427vfh7e1.png\"\r\netag: \"58b98a35-a905\"\r\nexpires: Sat, 11 Oct 2025 05:57:27 GMT\r\ncache-control: max-age=7200\r\nx-file-id: x16233079x\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43269,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced","md5":"5fcc5c91d409e0dc6e2fe02f74176ea8","sha1":"26c7af3f1e997aa1871d98b3551a381cb0d4f90e","sha256":"4f6528919bb0f9ba4d23d37761fd4fd18561cfdaac54afe7f852dc9612960d7a","sha512":"b9d18dd58bef34baea8729571907eb8c90b845b84af39da3659469570f95c38136f0ee2a50eb7b670c3efe136e185a715f68820f4ddf4b785c2b1a200fcbdf8b","ssdeep":"768:2bULzsgLVzQlMAOrbw6eLXQtqog1EHN6cKIjrtaJsZ8JiUOyqo81AtL4MfozdDQT:2YLzhL9Gmbh8+njt6cKQ0JsLaXmMa2","tlshash":"34130163b1e157a348160bbececf0bf10bd220a5545262b1ee72978c18155ed4f3fb9a","first_seen":"2023-05-07T06:40:32Z","last_seen":"2026-05-24T16:52:47.113425Z","times_seen":81,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":62,"dns":4,"connect":14,"send":0,"wait":28,"receive":15,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"h.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"h.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"h.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"h.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.top4top.io/","fqdn":"i.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"65.21.235.194","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T03:57:25.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 00:07:07 GMT","end":"Sun, 30 Nov 2025 00:07:06 GMT"},"fingerprint":{"sha1":"21:E8:F4:20:C5:3A:7C:52:D7:9B:8A:7D:C2:E6:8D:77:45:55:3A:DD","sha256":"98:61:D3:2B:09:AB:CB:22:0C:74:F8:09:05:87:44:9B:AE:E6:41:96:C1:27:59:2D:CB:BE:3B:55:AD:05:1E:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: i.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 03:57:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://top4top.io\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22335,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T18:31:00.561381Z","times_seen":15971922,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":101,"dns":51,"connect":13,"send":0,"wait":14,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"i.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"i.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"i.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"i.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/css/fonts.css?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/css/fonts.css?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Dec 2019 20:10:12 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 16 Oct 2025 14:08:40 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqMq7QPt7jGdBu%2BDg4jpqIsK9NYQa0a1EerwOqPSQmz8uo1v%2Fh4jZMUJ%2BYHfIWnD0Xd6ga4xpjJXB0uKlxwzKGrg9DI49sjtM1w%3D\"}]}\r\nage: 136126\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5e0bab24-1e7\"\r\ncontent-encoding: br\r\ncf-ray: 98cb6ef0fa9a5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a280a44f63927c8634251d8eaddf4ae3","sha1":"46688c0b6945b6480806455ba8460cc6c9a67770","sha256":"c2367854ec3926b2b955ee4f059cf6012057f6a2531f65ab3074692670cb94e2","sha512":"ca7cbad71787e895aea7b829c8ed8366312379181134a57c8b8f8d5988c3bbde1291904bbb33326f340e4a4324c683a5b155101e4daf6e029e89b306e8c70c56","ssdeep":"","tlshash":"38f0e24c620b73b3531224cf27bb8770684a848791c6384dba7c4b544f738bfc261b1a","first_seen":"2025-04-07T10:47:25.445172Z","last_seen":"2026-05-24T16:52:47.115638Z","times_seen":120,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":253,"dns":2,"connect":12,"send":0,"wait":6,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/css/the220px.css?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/css/the220px.css?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Mar 2017 23:54:29 GMT\r\nvary: Accept-Encoding\r\netag: \"58cb25b5-2d8e\"\r\nexpires: Sat, 11 Oct 2025 10:38:44 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 580721\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fY6sccshcZK1eqmpBlOo1jXRQcuW7y8ghwgzbfAecc4OELaWScW6Kx5FmUq9pqYYgEGASWfz2tcBNkV0Zah6I8UC4pVDMg1lOkU%3D\"}]}\r\ncf-ray: 98cb6ef0ea8f5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11662,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2d47ed44a85f93760b3923002721d9a1","sha1":"ad150370bc3a8f1c692f86093b0c88c502954bb0","sha256":"47600b5000c51beb6ebed3f76f7587392108787ebbe56d18f4e69036c93214b2","sha512":"79ef28709c4006ceaf97556f89f1d7372269b76c625bcd9a0760fbad2c6ec394fddc948df96d8ee1db3f52f67311c25e03c58031143a803904143379b6739553","ssdeep":"96:kVg/0bSE2GVCLMuoCi7NDh76PISTRDnWK7L2GX5XvPA/S4CZoa10nau0xaSZxw4H:bLaoHt5oTnwuvj1XwzdF","tlshash":"0c32552677001640a11be5acffd55b942b3f0063ef0e1dbbb11a66bcd78a4a45e7278c","first_seen":"2025-04-07T10:47:25.446169Z","last_seen":"2026-05-24T16:52:47.123792Z","times_seen":120,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/adimg-61?1760155046","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 00:07:07 GMT","end":"Sun, 30 Nov 2025 00:07:06 GMT"},"fingerprint":{"sha1":"21:E8:F4:20:C5:3A:7C:52:D7:9B:8A:7D:C2:E6:8D:77:45:55:3A:DD","sha256":"98:61:D3:2B:09:AB:CB:22:0C:74:F8:09:05:87:44:9B:AE:E6:41:96:C1:27:59:2D:CB:BE:3B:55:AD:05:1E:A3"}}},"request":{"raw":"GET /adimg-61?1760155046 HTTP/1.1\r\nHost: top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nCookie: sid=L02O1N-XOapOkjZbS9DMfaJnMI4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sat, 11 Oct 2025 03:57:26 GMT\r\nServer: HotCores\r\nLocation: https://h.top4top.io/p_427vfh7e1.png\r\nI-AM: US01\r\nContent-Length: 3\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":43269,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T18:31:00.561381Z","times_seen":15971922,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/fonts/fontawesome-webfont.woff?v=4.2.0","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://top4top.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s.top4top.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 65452\r\nlast-modified: Mon, 26 Sep 2016 09:33:17 GMT\r\netag: \"57e8eb5d-ffac\"\r\nexpires: Sat, 18 Oct 2025 01:54:23 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7383\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkKafg1dajoo7e6sM7MT8zKN7R0MCmIIf6BKaow0pmFQQuOGlKoPct8sh%2BC6IwEJjiL1LqwcNzAHYrAr87kIpurEdBJuECWuAQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98cb6ef35d2856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65452,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 65452, version 1.0","md5":"d95d6f5d5ab7cfefd09651800b69bd54","sha1":"7d65e0227d0d7cdc1718119cd2a7dce0638f151c","sha256":"199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1","sha512":"e96012d2fcd5df03c2f7385c9ee2a2932b3909659d59e32bf3155e102eaf9eb7b4b00c5806c892ace1b8f4bdb58630fb20868ad368c771bd8d2aad7749b7a399","ssdeep":"1536:WhdmBOT/dMBXSeRkzJBJlLsZrzhWaSU82n:WLmBs/dMduJBJl2nQan","tlshash":"4f53023b2a717a74b8f5cda4af04f33229dbfe99f8840472d52a1b5a84671185b04b19","first_seen":"2023-04-06T01:39:02Z","last_seen":"2026-05-31T15:19:46.694721Z","times_seen":12890,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/css/reset.css?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/css/reset.css?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Sep 2016 09:33:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57e8eb5d-3f5\"\r\nexpires: Sat, 11 Oct 2025 10:38:44 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 580721\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1okaYgaUWQLhxTiQnLEq8YJ8hjqPd9nbQJ7UKCgK6fZDVzSnV0Nn%2BPJ37RO%2BayQFx54mqDpljVOKXNFNErQWjrWKkZVlGdw244A%3D\"}]}\r\ncf-ray: 98cb6ef21ae05694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5a119874400f3ed750c0220262d1970a","sha1":"3e6b1509e17c4b653a7cc71cdad9febe4ac8e63c","sha256":"2554d8e633ec42cadd9bf2c00a0ceb83dcf9daac437730cbc42c60489b1bc6d6","sha512":"c799c3dd5dd9101bd67cfb2d0bc9f758d3cf7f165a1de9283fdd7848bf7fb3ca8281625d4717d2d234763eb6d24946425938534e50f5e2e93ea6333938339221","ssdeep":"","tlshash":"9011251552201e500beed4b4f229df64df5c132e5a9709b4e4aed81b444d0bd51d53af","first_seen":"2024-12-01T05:35:53.76448Z","last_seen":"2026-05-24T16:52:47.118265Z","times_seen":125,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":445,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":450},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33434\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Oct 2025 11:09:36 GMT\r\nexpires: Mon, 05 Oct 2026 11:09:36 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 492470\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95786,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-31T18:33:59.125499Z","times_seen":51325,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":15,"receive":17,"ssl":454},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/javascript.js?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/javascript.js?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Sep 2016 09:33:17 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 11 Oct 2025 10:38:44 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QHMdrqbSSEV1XXEMJtVd7fgEp778yHutXpPqdIMLANo2PvLIBqEeZB5zhaJwdlwXyW5O%2BwBEI4fCTgz18KXwzkhehyfzBwBov1o%3D\"}]}\r\nage: 580721\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"57e8eb5d-3ea7\"\r\ncontent-encoding: br\r\ncf-ray: 98cb6ef0ea925694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16039,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"dc52cee62c015e4abc6d4ce1da9238a9","sha1":"caa5a19a1edd47c178c9b4eb5c0641002047bae8","sha256":"d0b72e5ac7e5041381c1481e6eae72cd7fefc9e93561f8d61098915dce55ff3f","sha512":"3311c2d4bac866e60f87ce071a0fa2a5eccec7f79922e86aced205556faae20953eeba3bd93b6a01090910c0b1374c93433fa6bd868506568e752f0f29a3c488","ssdeep":"384:gLeHdiWgtLnJGLePA1Acg9Yppy2CbZptEJ4+p1rpGSdvegK3y7P2s34oEHand4Hd:yWiwi2aZpiRm3y7P2s34o+aPdr+TUUmG","tlshash":"2c7264253fd712b34113e07d1a8fa2c5f624806faa6165dcbdbc85d49f60bb106adee0","first_seen":"2024-10-29T18:06:29.044925Z","last_seen":"2026-05-24T16:52:47.117026Z","times_seen":143,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/ads/adpull.php?n=1\u0026w=300\u0026h=250\u0026call=js\u0026t=banner\u0026divid=7787112109","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 00:07:07 GMT","end":"Sun, 30 Nov 2025 00:07:06 GMT"},"fingerprint":{"sha1":"21:E8:F4:20:C5:3A:7C:52:D7:9B:8A:7D:C2:E6:8D:77:45:55:3A:DD","sha256":"98:61:D3:2B:09:AB:CB:22:0C:74:F8:09:05:87:44:9B:AE:E6:41:96:C1:27:59:2D:CB:BE:3B:55:AD:05:1E:A3"}}},"request":{"raw":"GET /ads/adpull.php?n=1\u0026w=300\u0026h=250\u0026call=js\u0026t=banner\u0026divid=7787112109 HTTP/1.1\r\nHost: top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nCookie: sid=L02O1N-XOapOkjZbS9DMfaJnMI4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 11 Oct 2025 03:57:26 GMT\r\nServer: HotCores\r\nI-AM: US03\r\nContent-Length: 337\r\nContent-Type: text/javascript;Charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":337,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"7fd94975819b02f5bafdaf5505ae4e68","sha1":"4aeead629a9c9ea6fabf85e0e3f4b4dfa97b362e","sha256":"3148d78a9526deb16c092d9bfa582d764645258072829866a4369bd0dc969b71","sha512":"8286e6b5d640c308dadb8c01ab7f51e3366a7ffb557bff497c9d939e992c6109e84454760522415c4cd4dadd7935e78f3a440bf6041acf595139a80cdf5abd29","ssdeep":"","tlshash":"e4e020a2a78865b555875278d170d6d59510b1008643bdd8da7013f181542bd0016558","first_seen":"2025-10-11T03:57:50.260688Z","last_seen":"2025-10-11T03:57:50.260688Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"top4top.io/","fqdn":"top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"188.165.137.170","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T03:57:25.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 00:07:07 GMT","end":"Sun, 30 Nov 2025 00:07:06 GMT"},"fingerprint":{"sha1":"21:E8:F4:20:C5:3A:7C:52:D7:9B:8A:7D:C2:E6:8D:77:45:55:3A:DD","sha256":"98:61:D3:2B:09:AB:CB:22:0C:74:F8:09:05:87:44:9B:AE:E6:41:96:C1:27:59:2D:CB:BE:3B:55:AD:05:1E:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 11 Oct 2025 03:57:25 GMT\r\nServer: HotCores\r\nSet-Cookie: sid=L02O1N-XOapOkjZbS9DMfaJnMI4; expires=Mon, 13-Oct-2025 03:57:26 GMT; path=/\r\nExpires: 0\r\nCache-Control: private, no-cache=\"set-cookie\"\r\nPragma: no-cache\r\nI-AM: US01\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":22335,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1874), with CRLF, LF line terminators","md5":"1c0c112fa594a7c7512c8f7d037ad485","sha1":"c1d8d16897fa4b2488b73bef6dd2625c1eadd58e","sha256":"429cd21a4506dce372e1cb7411798a8afd54c40b12935249a73b3f5e33de376c","sha512":"2de9a6d74e428e45d7cc279adc019ec83451c124f6971bcae5aabee175e5d8d1c58b2f7f9a7a0d352749c0e9c8b7fd19e4e48dfb644c6e02585d967550fd104a","ssdeep":"384:QfRIjUDGO2G9kLL9j8dVchZAEwdJ11vFlFt9kitZbRJgR5MKxviH82ZdCjQjfZWX:QfRIjUDGO2G9kLL9j8dVcXUh4e4RWKx1","tlshash":"fca2d7f75d104d2b2612928a90e2331ee4b6552ff7c3bd193aeacb31bb53961c27509c","first_seen":"2025-10-11T03:57:50.2637Z","last_seen":"2025-10-11T03:57:50.2637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":138,"dns":65,"connect":22,"send":0,"wait":99,"receive":29,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/css/stylesheet-3.3.css?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/css/stylesheet-3.3.css?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Dec 2019 20:10:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e0bab24-5d49\"\r\nexpires: Sat, 18 Oct 2025 01:54:22 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 7384\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMynY7l5JXlUR9aJ3a2B0MIk4iKMAODCodD%2BGJYDAjdtss0eZD5RlPY8jZt3vSD8wwcPykAS9srVPJYS%2Fyqvyyxyvg4C0jhEINE%3D\"}]}\r\ncf-ray: 98cb6ef21ade5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23881,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"06de85831c5f76801c2f73a0dafcd4bc","sha1":"5c75031de8c36d833204e9c4da044ff4036f1194","sha256":"5ba6f771ae350dfd816bdc94839c1b98f8cea02a9b8951bb148e0ccd1803aad3","sha512":"1cdd6d0f4e7f7152006074e73a6244128f261bba7756c2712b8dbfaf64588317a32a2a0c09e3d81d3166988e00943e0b6664efbf6ece6183e41164c50a38d4f7","ssdeep":"384:t3O6Sin6iFnOMQCE/I3XDku4BpbGopZwR/J8kdqV:t3O6Si6iFnOMdfXDkuobGc+ndw","tlshash":"ddb2852777492882f213b0fafe1a8725770f8117ef4e5e69f9f8627c91444a462b234d","first_seen":"2024-10-29T20:04:43.492955Z","last_seen":"2026-05-24T16:52:47.118876Z","times_seen":138,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":439,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":443},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.top4top.io/styles/default-new-reg/css/bootstrap.rtl.min.css?rev=47","fqdn":"s.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"104.21.5.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://top4top.io/","date":"2025-10-11T03:57:26.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 05:11:07 GMT","end":"Fri, 19 Dec 2025 06:09:37 GMT"},"fingerprint":{"sha1":"B9:7C:E4:EA:82:C5:91:B8:3A:CC:1C:FB:BE:00:8C:D1:66:27:8D:AC","sha256":"B4:DA:8C:67:13:90:87:F7:C2:B2:20:EA:F7:E2:74:9E:7A:D1:8C:9F:32:B4:BA:A8:B4:91:B1:44:C2:EA:3B:1F"}}},"request":{"raw":"GET /styles/default-new-reg/css/bootstrap.rtl.min.css?rev=47 HTTP/1.1\r\nHost: s.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://top4top.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 03:57:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Sep 2016 09:33:17 GMT\r\nvary: Accept-Encoding\r\netag: \"57e8eb5d-1bae7\"\r\nexpires: Sat, 11 Oct 2025 10:38:44 GMT\r\ncache-control: max-age=5356800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 580721\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wbyDGTNoZrSX7Oxzkq%2FP0K6XndoGAWSjTplujKY2OEYpNbMju2eH2xMIruk%2BGtZYWi5uIMaJ4XrusVzHU%2BxiI6Ks2w020fzGAs%3D\"}]}\r\ncf-ray: 98cb6ef21adf5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113383,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"131a692bfa8a0568eb1fe7d222ec1d38","sha1":"28fd939f6f05ee037b0ed26837b2462ee64a2e34","sha256":"a60f90398750c832d435897bcd263a7b9dac3c581e55dfd5d04020ee1d849350","sha512":"e29b8f88c0c23f8e2c18e79cbc118858c40747603a912846aa3719a8815b22aaf67b95f5038e34aeb5ce406fbefd4c36c2ac37f0625f488af5eed107967fa099","ssdeep":"768:+yPGxwxkBgA/X/NciyH7jN1eeekdIyRbVbaUyN+ceanKZ5/j0aCnRQmNac:4wujvyH7jNekajUoA/rCB","tlshash":"a9b3c7a0f11031ea7223c55ab1d0ed872619a153e52b4fb7f22f29d84f895ca1773f1a","first_seen":"2025-04-07T10:47:25.44901Z","last_seen":"2026-05-24T16:52:47.121194Z","times_seen":120,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":440,"dns":3,"connect":1,"send":0,"wait":5,"receive":0,"ssl":442},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"s.top4top.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}