{"report_id":"5f9d306b-7e8c-4a2d-a167-43b55338a6cc","version":0,"status":"done","tags":[],"date":"2026-06-28T14:49:15Z","url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"104.21.43.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"title":"marsbahis-hemen.icu/","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"104.21.43.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T14:49:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-hemen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":7,"received_data":746881,"sent_data":5393,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"marsbahis-hemen.icu","ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-15","domain_rank":0,"first_seen":"2026-06-28T14:07:48.328408Z","last_seen":"2026-06-28T14:07:48.328408Z","alert_count":7,"request_count":7,"received_data":267486,"sent_data":5673,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"54e1b00687c6b3e91d6ed5405ab2c567","sha1":"34995487462bbad60d3147a484fedf00745e36be","sha256":"b329e51b4ca3dd4c3036612e5a11bbe4025d69ef5c3d175fdeb33c5bbbdb7eab","sha512":"c060b7cc4b314aeb0bfb432ac360057f76d721aa920024f3f9eb843d5e17622d758bfaab3a39d1aae76ed4aa94922ac72709ad66d06bcc8ae58d5d54c6ef9501","ssdeep":"","tlshash":"93c0222ef13f4d44a1231420bd3f36a0cc2b718810083e89aa2a08c607624c0a5d1fb1","size":192,"data":"","first_seen":"2026-06-24T10:51:52.218115Z","last_seen":"2026-06-30T13:33:38.623164Z","times_seen":4312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-06-30T13:37:08.577212Z","times_seen":59869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T13:30:16.524315Z","times_seen":758887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d527e09c4b05af7e30c60be60a9e0066","sha1":"11dfa3accacb1a9831fc4c448d0f04a0637a4a25","sha256":"3a6a5de422656a7ca3b14f7c4cb8338fe9a658797215b219a1bbc254f20dd794","sha512":"a993700d4078b7b34b9afe2ebe7860cd327a2cde85c9cadd1f77437cd907b14156adccef5dbfdb34baf670fa3416218ba2e3250f2742511258bd6764b8a62a78","ssdeep":"3:N/BKL1XaTA:eL1q0","tlshash":"fc5504c0744031730430d500f350141770051551353d0541715f1cdc17340404c557c0","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.488812Z","last_seen":"2026-06-28T14:49:25.488812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2f8aa4540f0d4d7be72c23b07502a0e6","sha1":"317c9376bbcf6e882876629fe1658bb5e16d0345","sha256":"5018cc40e4d2d65008344142157b35b8a8b7b002a725ba011fcf46c9ec55eb62","sha512":"57cd8bd510ad32f2961cac110cf22e566f57c48e9ee245a527f7de481b8fe823e9e7baddb59c38b9041ae7e4e3266102ca5a7fb47d1ea24b1383918c9472bed5","ssdeep":"3:N/BKL1XaR/:eL1ql","tlshash":"735504c4f44031710430c404f350541570150501157d04017c7f4ddc17340004c55744","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.489863Z","last_seen":"2026-06-28T14:49:25.489863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e3a0deaf7d759e9d1b4020f4f4116031","sha1":"8713a0eeebd78f1de462b3c3b2b558fff1096cc4","sha256":"6244181f0e35cb544a4ba15494e9d9e1653b9b7331ef66b96e7e95963bd01654","sha512":"ab9a683c5797d7e1ffb360bd2131d88882b60b18c6f9f60b2c0401a2a13dd2a6312cb33f2682cd57ca300d8e4fa6739c17239f9539b08969f5f72ba0b59cd825","ssdeep":"3:N/BKL1XaTn:eL1qT","tlshash":"655504c0744031710c30c405d750541570070511353d0401f05f3cdc17300400c55f40","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.491518Z","last_seen":"2026-06-28T14:49:25.491518Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"97c880095c95425ecee97cc9b2df363c","sha1":"59facd3e3774fd2fe8e9da1835847033e52bf5c1","sha256":"35d31ba9af9eece416f3a2f5abfdcf93eb7c58cdb33324a665834b2323f681dd","sha512":"5601a87c812c998b486e7b4dc216e9c51422fe33b1a23172e11406e88d687beae2bae3a4ff2891323fedfd3f5772d7104ea0d1773ecc334d975f183008b832d0","ssdeep":"3:N/BKL1XaT8n:eL1qg","tlshash":"eb5504c0744031730430d500d351141570051511353d0401715f1cdc17350004c55750","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.492823Z","last_seen":"2026-06-28T14:49:25.492823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0e90290054042162eb96bcc78c4984c","sha1":"d864cf379b81503db44fdf9246e65d208b4fca9f","sha256":"8919c36589902ec5412d28c8d0b5aae4e8a6816e254b0caed173b9cea57b84e0","sha512":"7a32bacb0687be15cdeab06d04880daca284dee65887bcf7626983c58cf26c09fbf5f72daea658b3d7090e6f41ef736f7cd5467864df1c3c3b286e242e1317ba","ssdeep":"3:N/BKL1XaWHn:eL1qWH","tlshash":"a95504c0744031710430c400d350145771070701153d0401705f0cfc17350004c5d7c0","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.494019Z","last_seen":"2026-06-28T14:49:25.494019Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T13:40:52.770381Z","times_seen":6557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"373747fa11abc00f84f34b5383d5edde","sha1":"de7a10d8c161d11fdd807af1c5a99513f6c5ed40","sha256":"f2d9048066a25f3d6a06ce9cc54bc4e90b43cc2063643fbb0ee95713989759c8","sha512":"ec3b65edf1111816ad8c0f22e931c6abb4d3bbb977fc94da260aa1d72c9975ff9e457b9b4bcd84d7ff69cfec49f90c5becccbe64474263dae061376776a71e4e","ssdeep":"3:N/BKL1XaSaU:eL1qSf","tlshash":"215504c0744031750c30c415d3501415f4450501153d0405745f0cdc17340005cd5740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.496059Z","last_seen":"2026-06-28T14:49:25.496059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/0e5a2d5c-0f58-449f-850b-dbc615bb8c7a","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T13:33:38.604013Z","times_seen":6323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8bc9473a2fc7378d2b8dfeafe41763d4","sha1":"2f851408542085675c558f756cbca82d5fff8b1b","sha256":"036b0b9d26514b7ea02282e38ee459479a3bffd48afa0d12d90ac48f1f1d5631","sha512":"376d5c7f581d0b5734f6c643b3c85d380fd52f3d169baa464cf292f8697d2a6d8f95e9b8d921eab7983b080dfb8ee1a39eefbfa93f9e2afac6e3419d71b64412","ssdeep":"3:N/BKL1XaQF:eL1qQF","tlshash":"a15504c0744031710431d400d350141d70050501173f0401745f0cdc17341014c55740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.510651Z","last_seen":"2026-06-28T14:49:25.510651Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T13:37:57.53327Z","times_seen":10295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5cabfa117de44ebb2180eb5aeb6f30b9","sha1":"c91170d7530584deeb7e9d0494d5c841c5019139","sha256":"c3c06b70254ba7fbfbb0cf6655cd8708cf36e354ca1616ec755ccdf81f12e84a","sha512":"afb73c3635eff8ce6f9b72039efdd73a96ad2f2282a40f091ab4f80691ea19ae27e9b9df3498846857d46205a95089e34c3b3ce64b881ecc50a9e9ff03e46f66","ssdeep":"3:N/BKL1XaQz:eL1qQz","tlshash":"515504c0744131714431d404d350141570050511173f0401715f0cdc17340004c55740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.512013Z","last_seen":"2026-06-28T14:49:25.512013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4813e4a9a4ade5dc9e2cf3b073e25c48","sha1":"059910b22ea088bef6053b3b1f5f8ef85f01999c","sha256":"68e0951b57e86640a6d27f123c8874a504cc6b42a155531c0e0a4757bc4f5cd1","sha512":"268ade85705e2bd4bb0643c0fc0df7ad35cce1e626ba7eb5acd194439374d29b6f77e36efcac67989491cc24163e8fc0a258e7ae77cd61fc18821ded60dd2d35","ssdeep":"3:N/BKL1XaWz:eL1qWz","tlshash":"5c5504c0744031710430c400d3501c5571050701153d0401705f0cfd1f340004c557c0","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.513077Z","last_seen":"2026-06-28T14:49:25.513077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a13ef88530ea03b99d4d45d4ad1ebef0","sha1":"b12fe92846604d96c2e7854611be7d4d8bdb71cf","sha256":"f06402c445e534ced5851bd5fb5b56cb63d383d33537b939ad97588c300a926b","sha512":"d4ed43924020322146592d1f6de6a1b7819962efa9b26348901083ae55b1eacc0c954eb53e51ba91808f4f85136a0e87507ad14368288259da01ed106c85d753","ssdeep":"3:N/BKL1Xaz:eL1qz","tlshash":"305504c0744031710430c405d7505c1570070511153d0411705f3cdc17700400c77f40","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.514244Z","last_seen":"2026-06-28T14:49:25.514244Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-06-30T13:37:08.383257Z","times_seen":59761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-06-30T13:37:08.500304Z","times_seen":59711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d7e9a381f56ae","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b2c7ef92f5b8555e1359d0e2bac96aa","sha1":"2bc4b3611bb6722a639a6dffa07ac181d29f44ab","sha256":"83a5f9a4c5fbcc6fc52db4b59562d70a07502067a8e45f9320cd947a99460071","sha512":"305615d4dc07f3c5703f3c26bd8eceab4f13f9e899c9ba43962e338235848da2294c0d148f04ad44c8c415ad76dae7ba8ce344dedb0ac3165cbc9c4293a22a2a","ssdeep":"3072:UeqQvU5kSJXEsAJzw6EdjBbwoqZMF0rQC0rDxbZxVq0wk:UeqQvU5kjszjJB1qZe0t0Pxtj+k","tlshash":"5124088dbec27107025e9839c437344eb26a4c8140086d6df9e196b13fe279b71fb6e9","size":222052,"data":"","first_seen":"2026-06-28T14:49:25.478644Z","last_seen":"2026-06-28T14:49:25.478644Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"376601b96f81f98d0c34aa6b8831caca","sha1":"4d702803845a0136a23210f2ecbdf3441e70da0e","sha256":"7b9daf212b50ecb09948e4c2b0ce6dd1bd4fe0afa9ade59b4258a112f1313ed6","sha512":"bf4750770a436fc8f8163218eddcfdde5b113d61b0d961fa649405b201ed8bde5505c2e972ae33e7ab0bedfdc4e8af9f6d6335374efa7834bd9843f89f920c5e","ssdeep":"3:N/BKL1XaR8:eL1q6","tlshash":"1f5504c0744031710470c405f750141570050501157d0401745f4ddc17340004d55744","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.516564Z","last_seen":"2026-06-28T14:49:25.516564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/c58da6f6-9ae7-4dea-9557-b3f283a1bb02","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T13:33:38.604013Z","times_seen":6323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/0d7b1b05-9001-4f0c-a7cf-af63554b17e7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T13:33:38.604013Z","times_seen":6323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-06-30T13:37:08.501115Z","times_seen":60035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"943a868e3987803eef70e0a54e628b8c","sha1":"f3e5da2521bacb55b3ecc8a9b2b120ca13b73371","sha256":"4f115553b57af1ba87cb8ea15a377458e980f7a538974d887db5bf81f813e3f8","sha512":"5ab1849bff9ce15136f525e44f703774b4ca5ff3316cd3660dfdce9cccb89cf77b594af3b8d5b831b9bd2656bc35ca9eadce35d9126c830353e934d94646f289","ssdeep":"3:N/BKL1XaT+Un:eL1qv","tlshash":"475504c4744031710434d410d350141570070501153d0403755f0cdc17341404c55740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.518378Z","last_seen":"2026-06-28T14:49:25.518378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e55264a2b4cc26410cfca64eb097b5b5","sha1":"cc4cdf81bee0a3ff15a6978d94f3066ff148ac07","sha256":"d3f1311ee4647ca47bd9d3f107e17b78f6991b50aeaa9c59f779adaea39b54c3","sha512":"a7d3f5e21cecc40a071715926baa34d771a9178dad0f7a918dbee48b61060956876499f0909d2976b668042ada16e9a1d93d05d7f952cc03cbbf869ac5f230e5","ssdeep":"3:N/BKL1XaT9c:eL1qpc","tlshash":"335504c0744031710430d400d3501c1570070501153d0401715f0cdc17340004c75740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.519364Z","last_seen":"2026-06-28T14:49:25.519364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e3b42a3360868caff5252eb421a9d14f","sha1":"de075447f1a4ef1b2f545f1446826ec80fb16667","sha256":"cf68e07031ded8717422f76d97b4c68ecd18fee076ef3572de0a69dbaf2b482b","sha512":"988fcf283ad5c67ba8b89383e9dc73d315cb61420e63297ac2ae1788f14dd6f80911a8d433d2fd9dde5c0e2f96073d260fc37ebaf2929f58b9ee5bc3e460c8b0","ssdeep":"3:N/BKL1XaRa:eL1qc","tlshash":"2e5504c0744131710430c404f3511415f00505011d3d0401745f0cdc17340404c55744","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.520516Z","last_seen":"2026-06-28T14:49:25.520516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/?__cf_chl_rt_tk=dgTsZhzCMord5jvPUKj86J6vcUaDJBo5WiZldpF1Az0-1782658129-1.0.1.1-pY4UTxY2HBfjSjcWga083hqJ7vxQXPB2Gz7dFhwpDvs","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T13:30:16.524315Z","times_seen":758887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T13:30:16.524315Z","times_seen":758887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"314c0c9d2a313402526dca9d93b67776","sha1":"604b47596f8816951d094145ec65f3e068d03329","sha256":"692ff75cb081a3efa43545e317f1f44d36ae90e577630f8a09296e724d4da046","sha512":"84743eb132c8b2efe9ee29be1f6e26a1015f7b2e0a736ae7103e5a368c0a93af4ccf9f258d4174a34db751d2c1177f7da652b06855b7a3b2022f8c40ab21bc13","ssdeep":"3:N/BKL1XaQfWn:eL1qQfW","tlshash":"c35504c0744031710430d400f350141570054d05377d040170df0cdc17340005d55740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.521639Z","last_seen":"2026-06-28T14:49:25.521639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"899030bb2006302829f841edb555c4e8","sha1":"c91b2c5282485c8ed360930fd43d6b91ea09ee5d","sha256":"0d14666a1f1cc91accc08397707a0a34f5f05abbdf3906c66680b96bfbdcfc76","sha512":"44144f63a4e9f8f8b098a9a563a57a826e4703f7db8a73200d10b18faec1d2b971da8877fc7ae19787251274cabc0d0ce0071640c1d6e89c7db7da1954335314","ssdeep":"3:N/BKL1XaQec:eL1qQD","tlshash":"0f5504c0745031710430d404f350141574054501173d040170df0cdc17340005c55740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.522827Z","last_seen":"2026-06-28T14:49:25.522827Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8057116a1c3c30bf9b5ef7a7a7096647","sha1":"c33fad4fbdbc34de43095c04235835cbeb602afb","sha256":"d1413b09c7e00759067425c5b04c171507de1187d34a100f4d29ca59ce38ea7b","sha512":"1427e09f869fba492efdc18fefcb8034b2593fb0cf29a618c7bf34b32fa73ede0f6b8aec1d5f6fa6ed2b917862298a675c82f6d4cbcdffa9f6500384638d9a16","ssdeep":"3:N/BKL1XaW9:eL1qW9","tlshash":"395504c0744331711430c440f3501455f0050711157d1405705f0cdc17340004c55740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.524123Z","last_seen":"2026-06-28T14:49:25.524123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"87b7754141efdd6b0278d9c0c67ec4dc","sha1":"e398a71b2ef093506ceb7563805f9d0806652d6e","sha256":"9e795592dc08dad7c63e020d2c531e7ef6a520019a7cc5371e7db4187929bcee","sha512":"2b08d696eedbdd6f77ae8427571dae9219d315072b98df0a6bf5e38b530c0aa2f7d4e9374d11a093cdb61fcafa5bd924730b3ddd88d3806b95750920e290a6b2","ssdeep":"3:N/BKL1XaKn:eL1qKn","tlshash":"a05504c07c4031710430c535d750541570050511153d0401705f3cdd17300400d557c4","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.525412Z","last_seen":"2026-06-28T14:49:25.525412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-06-30T13:37:08.391836Z","times_seen":60100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T13:40:52.770381Z","times_seen":6557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4fc1cbc7fa233c79018934d168cf85d8","sha1":"459f5ca8f7f517a4fc5696ee78f1704761194ced","sha256":"842422776278f0bee5dceb3e3474a858488086aaa09dc9cbca8dae3a02748d2e","sha512":"0d189b22bc88a01dc56b8089f8e37a4b6e931b6283d1803fcc6e70ff69c8f3099d8d7c5169c2d55c27cdc676b7837bb011c6420b3c7a9a67231ad3380e8a9b9f","ssdeep":"3:N/BKL1XaSe:eL1qSe","tlshash":"f95504c0744035f10c30c414d750141574050501353d4401705f0cdc37340005c55740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.527238Z","last_seen":"2026-06-28T14:49:25.527238Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"efddb61a2a222432fe7e9c06862ddcca","sha1":"db9187c5af275d71ef95534221e823f2a113abec","sha256":"690d381701b651d1509dca2001eb78753906c82484f988194de62c181dd5b37d","sha512":"b880d889410b83b11b5c5bc13a26280a3db34517bf982af7480308f2c3200a25481fa9396db189fccf18d8c013f9b60ee059915cbfc9eb294cc7b453fe805356","ssdeep":"3:N/BKL1XaWIn:eL1qWI","tlshash":"5f5504c0744131710430c440d3701455f0050701157d0445705f0cdc17340004d55740","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.528483Z","last_seen":"2026-06-28T14:49:25.528483Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"089fa612440228f9c8c9270b09a4d738","sha1":"b7c58305a5257aac895a45c5b798147e75ce7a82","sha256":"3849b01cdad9c133c56fa752f32264c2f2d387104eeaf655164484fc3fe1d10b","sha512":"1dc5410c3ca573a8a2097eefa9fc2980163090d19e2c9a207045a8d8685cb192127eda400064bd3668b7e5c3dacf2a6d415a9af103a9fa855ae5480ea7608233","ssdeep":"3072:L0Lg78tUCoqevZKJLPsgKdTBb86OepPENSqi6lZ8iAhgy6x:L0LzkZKJLPd4d86rpPENtpZ46x","tlshash":"d3342c89bac3b407031a6ab58037309d721fdc8050181d59f6e29de43be5b69b5feaf4","size":234614,"data":"","first_seen":"2026-06-28T14:49:25.529486Z","last_seen":"2026-06-28T14:49:25.529486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77ce98df0214fd5d3087ca51a421849c","sha1":"783040d924635c73984abd6a2734202fc379088b","sha256":"76b942de8e6eac5f3a7c9995dbd03aa075e4c90b6601572009c6aaab799b5efe","sha512":"ed69624519a2232b1b821bc403192bc6357c7a214ae65e8bdda2ff2119b9b7a9ad890ae4fd570bfb090d8406dc54c8d6df0dd6817093d9ed4817cc769ea0e477","ssdeep":"3:N/BKL1XaRE:eL1qG","tlshash":"265504c0744071710431c404f3501f15700505011d3d0401755f0cdc17740004c55744","size":1337359,"data":"","first_seen":"2026-06-28T14:49:25.530572Z","last_seen":"2026-06-28T14:49:25.530572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj193 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj196 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj197 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj199 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.7179835368140678] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj191 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj194 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj195 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj198 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.7179835368140678] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":176057},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178989}]},"http":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marsbahis-hemen.icu/","date":"2026-06-28T14:48:49.488Z","timestamp":1782658129488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://marsbahis-hemen.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:48:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://marsbahis-hemen.icu\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d7e9d6eb0b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22105,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T13:37:57.53327Z","times_seen":10295,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/cdn-cgi/challenge-platform/h/b/flow/ov1/1015241652:1782655217:BDoIfuCLMA3vN_I2p3sebVecucItY_iSLrMOhwYZTQ4/a12d7e9a381f56ae/_UvEv9VzlCCHrpV8V9ksyYSfVggJyC60JlfdrHq1XFA-1782658129-1.2.1.1-y3BARSGOX1SstvNSv4wEXAkUqHgfu6NmbYSU2YqhKfnv3ySyDMhLSxLiZDK51EiK","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://marsbahis-hemen.icu/","date":"2026-06-28T14:48:49.507Z","timestamp":1782658129507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-hemen.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 09:56:06 GMT","end":"Tue, 15 Sep 2026 10:56:02 GMT"},"fingerprint":{"sha1":"42:9C:FE:D3:AF:0A:7D:FB:17:39:FF:ED:12:A2:05:96:46:CC:0E:45","sha256":"A1:9A:9F:04:95:8A:55:27:14:CF:84:AB:18:A8:39:2D:E0:B0:92:E4:47:AB:58:1E:E9:53:C0:42:0D:11:E1:E0"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1015241652:1782655217:BDoIfuCLMA3vN_I2p3sebVecucItY_iSLrMOhwYZTQ4/a12d7e9a381f56ae/_UvEv9VzlCCHrpV8V9ksyYSfVggJyC60JlfdrHq1XFA-1782658129-1.2.1.1-y3BARSGOX1SstvNSv4wEXAkUqHgfu6NmbYSU2YqhKfnv3ySyDMhLSxLiZDK51EiK HTTP/1.1\r\nHost: marsbahis-hemen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-hemen.icu/\r\ncf-chl: _UvEv9VzlCCHrpV8V9ksyYSfVggJyC60JlfdrHq1XFA-1782658129-1.2.1.1-y3BARSGOX1SstvNSv4wEXAkUqHgfu6NmbYSU2YqhKfnv3ySyDMhLSxLiZDK51EiK\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2434\r\nOrigin: https://marsbahis-hemen.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 2c7tryrpZf/Pe5IISLpCBLwb7FqGBXctvyPgnHySATQ=$+lQlIoS8xCk7yHPm3YXWoQ==\r\ntiming-allow-origin: https://marsbahis-hemen.icu\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 14:48:49 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12d7e9d683556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19308,"size_decoded":14929,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19308), with no line terminators","md5":"cd554cca3ecdd4a834224f727d3aea82","sha1":"959d359b6e35821ced9eaf8309feb3c980061e66","sha256":"d96941da6ace12ebe5a27e05e6ac718adac5e8da893de06a5fc3d039fe68bdfb","sha512":"dbc3b83045f3d7d499e7a36bef3c24aab8207f1343f51e1b531e960823a8aa4b51f5413e8f3239760aa03297033416e99ab7f29489126750544898cf4bedf5c5","ssdeep":"384:m7yVrEpMOKZI38huShOh2OroV+dnrVHo1+FT1Fo1m/MXbp4bj82:m7GQpMOGQ6uShOweq+dnrpoAFT1217L8","tlshash":"f482e05c86c44de92fd7dab3edc3188b2e42ffc79c7849d04805a10b4e4b59a697057e","first_seen":"2026-06-28T14:49:25.474684Z","last_seen":"2026-06-28T14:49:25.474684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-hemen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a12d7e9dc80d56af/1782658129926/3YTnLsq4t10NsDw","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:48:51.182Z","timestamp":1782658131182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a12d7e9dc80d56af/1782658129926/3YTnLsq4t10NsDw HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:48:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2571\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12d7ea7eae656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2571,"size_decoded":2792,"mime_type":"image/png","magic":"PNG image data, 46 x 53, 8-bit grayscale, non-interlaced","md5":"e07d95f43b46a830a906af9489c63790","sha1":"6157e934ce2af98d4d36a3052cee6f7673ca239c","sha256":"168bfb222ca00bcff7a50067d35c45a555472a0a4ee69247ced792c20bcd446f","sha512":"ed10e9b355865c9aef8153066461c851573a55ef5490d4512305e02e12c6a3e96954a004ea802d41ee0c7c795bd6163773a54056b670d426e5ba5021f3260968","ssdeep":"","tlshash":"c85112d552016d34d3c6027612102600e9290201811103085007843618495485248f41","first_seen":"2026-06-28T14:49:25.475902Z","last_seen":"2026-06-28T14:49:25.475902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T14:48:48.918Z","timestamp":1782658128918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-hemen.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 09:56:06 GMT","end":"Tue, 15 Sep 2026 10:56:02 GMT"},"fingerprint":{"sha1":"42:9C:FE:D3:AF:0A:7D:FB:17:39:FF:ED:12:A2:05:96:46:CC:0E:45","sha256":"A1:9A:9F:04:95:8A:55:27:14:CF:84:AB:18:A8:39:2D:E0:B0:92:E4:47:AB:58:1E:E9:53:C0:42:0D:11:E1:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marsbahis-hemen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-H79XHnJzuyWSJwzcsyErSX' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12d7e9a381f56ae\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvtXsefmYpx5iIrVWGyZlILUGBWY%2F%2FRl0ob03i1m6LM3plTLIqPhXO7uhHgbvrENJhaEVEzKGlru7mK4TurHs9g8T5SvJwHRkHu5h11tYaiyLWQRd3Zw2ql1vM4Gu6BO7mrW8kys\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 14:48:49 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a12d7e9a381f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5687,"size_decoded":5631,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5687), with no line terminators","md5":"f80932e3baf61267094af3eda36f694a","sha1":"b5ef2a99666037e225c8074ff53d332e2cac6d38","sha256":"868299f9d9d4af3ff6b7e720090978c38dd862f55df3861df92ffad17bbcdec0","sha512":"79cc71fe21872531a3f90ae454a89afed9a0d906d4f61191abbb6bdb967a3ae60365017f5a25f2d71033708494cb8f0fbd070ac2b11d814c1e12de66ff02aa2a","ssdeep":"96:PNy8toXZzIEb0EaW87gvJZO/cxGVZaAUC1CXX5+EWdLlc3ErYzueh8cyt9mw:PNRtkCBOJfxGVZaAMZH0lc3EkyKytgw","tlshash":"88c14af76631e01b87f52b85646bb3188320b219bf009069d592fe6d85ddf9b41681c6","first_seen":"2026-06-28T14:49:25.477482Z","last_seen":"2026-06-28T14:49:25.477482Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":58,"connect":16,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-hemen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d7e9a381f56ae","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marsbahis-hemen.icu/","date":"2026-06-28T14:48:49.226Z","timestamp":1782658129226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-hemen.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 09:56:06 GMT","end":"Tue, 15 Sep 2026 10:56:02 GMT"},"fingerprint":{"sha1":"42:9C:FE:D3:AF:0A:7D:FB:17:39:FF:ED:12:A2:05:96:46:CC:0E:45","sha256":"A1:9A:9F:04:95:8A:55:27:14:CF:84:AB:18:A8:39:2D:E0:B0:92:E4:47:AB:58:1E:E9:53:C0:42:0D:11:E1:E0"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d7e9a381f56ae HTTP/1.1\r\nHost: marsbahis-hemen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-hemen.icu/?__cf_chl_rt_tk=dgTsZhzCMord5jvPUKj86J6vcUaDJBo5WiZldpF1Az0-1782658129-1.0.1.1-pY4UTxY2HBfjSjcWga083hqJ7vxQXPB2Gz7dFhwpDvs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 14:48:49 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12d7e9ba82956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222052,"size_decoded":80745,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5b2c7ef92f5b8555e1359d0e2bac96aa","sha1":"2bc4b3611bb6722a639a6dffa07ac181d29f44ab","sha256":"83a5f9a4c5fbcc6fc52db4b59562d70a07502067a8e45f9320cd947a99460071","sha512":"305615d4dc07f3c5703f3c26bd8eceab4f13f9e899c9ba43962e338235848da2294c0d148f04ad44c8c415ad76dae7ba8ce344dedb0ac3165cbc9c4293a22a2a","ssdeep":"3072:UeqQvU5kSJXEsAJzw6EdjBbwoqZMF0rQC0rDxbZxVq0wk:UeqQvU5kjszjJB1qZe0t0Pxtj+k","tlshash":"5124088dbec27107025e9839c437344eb26a4c8140086d6df9e196b13fe279b71fb6e9","first_seen":"2026-06-28T14:49:25.478644Z","last_seen":"2026-06-28T14:49:25.478644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-hemen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/favicon.ico","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marsbahis-hemen.icu/","date":"2026-06-28T14:48:49.510Z","timestamp":1782658129510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-hemen.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 09:56:06 GMT","end":"Tue, 15 Sep 2026 10:56:02 GMT"},"fingerprint":{"sha1":"42:9C:FE:D3:AF:0A:7D:FB:17:39:FF:ED:12:A2:05:96:46:CC:0E:45","sha256":"A1:9A:9F:04:95:8A:55:27:14:CF:84:AB:18:A8:39:2D:E0:B0:92:E4:47:AB:58:1E:E9:53:C0:42:0D:11:E1:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: marsbahis-hemen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-hemen.icu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-yEx7tjDnJAaOpRaSjXLz0V' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12d7e9d683656ae\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bisuAgzUN%2BcCTseQI%2BTxzBuaSEe8CvHycwD%2B%2FSFms7ojIJ85AIzAbix01o%2F2q3LamGGXUCU%2Bt7%2FQQ9M5b%2Fcxa2ZFCginfa9a3PSk2hYPWsro4%2BkRukpp8yL17nXzOU3W3vjhvCRU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 14:48:49 GMT\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\ncf-ray: a12d7e9d683656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5763,"size_decoded":5681,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5763), with no line terminators","md5":"dd5abd8b932517079218fafa3f24289b","sha1":"3fd92703cabca753bcb114120f59ca4229a95f43","sha256":"d305d283077be779a76b407e8554144c09c51de751d399e62b2b47ce90ea1f85","sha512":"2ae45fe062d69c1c807e1dd5e96674c5548d89b9fd2de0de5e819fa76a8855f79d40eb83e754734f36b408c9875af332725b36b1d83d58459688cac8ac526d01","ssdeep":"96:PNyUtoXZzIEb0EaW878TpUQCzJTHPbfVVAbBQMABtNnrxdjYzueh8j9mw:PNVtkCB6pvClzTfVVAbBQ9/nf8yZgw","tlshash":"89c13cd39c31800a87755f9548ba73aca312f5569b08615891e3bbac86dffdfc1385c4","first_seen":"2026-06-28T14:49:25.479626Z","last_seen":"2026-06-28T14:49:25.479626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-hemen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://marsbahis-hemen.icu/","date":"2026-06-28T14:48:49.564Z","timestamp":1782658129564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:48:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-DAolMDHSMregGnRcH1aPYV' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d7e9dc80d56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: zwoclvdp;dur=252481, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252481,"size_decoded":97946,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"f6524083e0f4c93239ac4a1afba0f649","sha1":"8625658e09a723d5f97b24a3b0f358894dc7ebe7","sha256":"ea759d5d9eae034ad3533b2d9ffd05a847dea2d1a1cb9fcd3ab09b90958809d3","sha512":"d4442d9d85b77a94a86b3759b744b8466ec3564fa62b7079b4395a7c6653fef3749139654a66338bbc2fca801e5885ebadfab1b34da18dae711dec7dd9f9b0b1","ssdeep":"3072:B0Lg78tUCoqevZKJLPsgKdTBb86OepPENSqi6lZ8iAhgy6x:B0LzkZKJLPd4d86rpPENtpZ46x","tlshash":"ab342c45bbc27407031b6ab98037308d722fdc9050181d6df5e299e43be5ba9b5fbae4","first_seen":"2026-06-28T14:49:25.480573Z","last_seen":"2026-06-28T14:49:25.480573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a12d7e9dc80d56af/1782658129925/54fee1574b55604ff5160c043a24396abaaef277ce805f98b19a7e6a62f38205/-8TRiaSlFzMnvCr","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:48:50.302Z","timestamp":1782658130302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a12d7e9dc80d56af/1782658129925/54fee1574b55604ff5160c043a24396abaaef277ce805f98b19a7e6a62f38205/-8TRiaSlFzMnvCr HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Sun, 28 Jun 2026 14:48:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gVP7hV0tVYE_1FgwEOiQ5arqu8nfOgF-YsZp-amLzggUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAxDKbk4RYZyL6XnTRyMLN4wCsxvmJhd3ftOd8yAXrz8VqFgtlvnKMefvXRO4zaElaSrpOMszh8KAW9Dsx69eFsAosPK4nvwsvfiyP6ZyhdxPLGuhjTi9yUrWzzkcXpKUD5oZ63WixlXmHZg-DGy34XBTBEDLpaBfa5nJjJuMdHFzFB3XZ4lKatFdK8sSGfXMAsUy10RQd9wnzBzarw_8QPnkBlqzJ4ZJmbO7eJ3Jx6rUKm0EsteVSMi1W_3UgNTuDSFntFLT7ivnApWTXp1kSxFIe5bwCn-1tnm7qDWHa8Q6WW3qloT-zXcLq1G6N4vNlnIldiS3oejrM7UI5IuMAFwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIFT-4VdLVWBP9RYMBDokOWq6rvJ3zoBfmLGafmpi84IFABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsM0Q9MnygIFl0gZx3w9LhhcDl_7YDbmNzAMUL7Xnp9GXdfWl2k5SxpfB-K_QfmiV_H7Cj8P94IMqoWL8MDExqPL01M2yoCDweJGMNAm8hGbJvLjBAr9mXOZEx9Xd_a1oM6VTL7hmfywqDKr7NjnZtoftBNM7aAcQ3oFunMqwu32HSeDNBFCR6cLq3N_eldve-E2AWzdWXrQfBQ-vNheECU-_SCUvXG_5xxdQ2AO6mpnRaaSuo-pxQhD2t-T8yKziV-ecPidkSrDvocgKAILEibz6aNYuH7U8kF5zXOjI4xRH1FqVs43TY5dwNvmfYjI-w8NNqKpoa4azpJqv3m2DVwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIFT-4VdLVWBP9RYMBDokOWq6rvJ3zoBfmLGafmpi84IFABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a12d7ea26d6c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T13:30:16.496107Z","times_seen":473017,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T14:48:55.643Z","timestamp":1782658135643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-hemen.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 09:56:06 GMT","end":"Tue, 15 Sep 2026 10:56:02 GMT"},"fingerprint":{"sha1":"42:9C:FE:D3:AF:0A:7D:FB:17:39:FF:ED:12:A2:05:96:46:CC:0E:45","sha256":"A1:9A:9F:04:95:8A:55:27:14:CF:84:AB:18:A8:39:2D:E0:B0:92:E4:47:AB:58:1E:E9:53:C0:42:0D:11:E1:E0"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: marsbahis-hemen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-hemen.icu/?__cf_chl_tk=dgTsZhzCMord5jvPUKj86J6vcUaDJBo5WiZldpF1Az0-1782658129-1.0.1.1-pY4UTxY2HBfjSjcWga083hqJ7vxQXPB2Gz7dFhwpDvs\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2200\r\nOrigin: https://marsbahis-hemen.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=25ozOF8t1526f4zjtPMpL8bhlhkHHRxuQaJV9cLxlLY-1782658135-1.2.1.1-K3XJo7t1uPLlgXD8WO6RA0TvqiNBup9SsyJyfDqiEKYIvuC5rjcD13CFES9_bzhjMaQGadc_7ek2.UuNSB9H_pmHzhOi9fDx9fHGYsQFBQ16EyGVOwEuEjqPJ0s2ehDwojtws8R3U_pRBXJVyBA5i2DtCcyerkB9PJ8KeT5WMx.TZm0eLE5edy7u22zVWdx2R1vnXVdBa9WmTX1tXM5zPSwmjRQccu4UTUKz6s.VjiKm3GV6N9JyhvS8raTxuZFtkqZM0REtThOXGbTUXt1x8yc8uX81zZvI1Wzhv.EsN6F80Keiq6ut4nzsJ2yDaPvVLA_0Nxqq11k8EzgMZqaKASeSo76COLSyE0mQEqj57NpDG8Wcyvj5_fifLZ51qWiCBxfiJxt5QVTQ.3.aiyNPC8O9SuPo.8pVTph3e_px5RdHTdcBbLjF8NnKJe6lj1O7fEpMagGpUQEP0bd4FmHteKneA6OlLKK9Ney2Ho6T9Dj6uSYhyaDfWdz80HP2WydT\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:48:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2FsrYtXuDrMNB%2B%2B%2B50Km%2FHaKUfcnE2c2xkkdxUa661jS7c1mnY7khpF5v43mOAb2A7in7Amd7OSUD%2F1%2Fe5PjegbMr600ekEK8Dq6RYjKfDo%2FjQO%2FTao52Pc82pPY4faF2ChtRBVs\"}]}\r\ncf-ray: a12d7ec3c9ee56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":4157,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T13:32:23.474547Z","times_seen":16859426,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-hemen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/favicon.ico","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marsbahis-hemen.icu/","date":"2026-06-28T14:48:55.864Z","timestamp":1782658135864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-hemen.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 09:56:06 GMT","end":"Tue, 15 Sep 2026 10:56:02 GMT"},"fingerprint":{"sha1":"42:9C:FE:D3:AF:0A:7D:FB:17:39:FF:ED:12:A2:05:96:46:CC:0E:45","sha256":"A1:9A:9F:04:95:8A:55:27:14:CF:84:AB:18:A8:39:2D:E0:B0:92:E4:47:AB:58:1E:E9:53:C0:42:0D:11:E1:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: marsbahis-hemen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marsbahis-hemen.icu/\r\nCookie: cf_clearance=25ozOF8t1526f4zjtPMpL8bhlhkHHRxuQaJV9cLxlLY-1782658135-1.2.1.1-K3XJo7t1uPLlgXD8WO6RA0TvqiNBup9SsyJyfDqiEKYIvuC5rjcD13CFES9_bzhjMaQGadc_7ek2.UuNSB9H_pmHzhOi9fDx9fHGYsQFBQ16EyGVOwEuEjqPJ0s2ehDwojtws8R3U_pRBXJVyBA5i2DtCcyerkB9PJ8KeT5WMx.TZm0eLE5edy7u22zVWdx2R1vnXVdBa9WmTX1tXM5zPSwmjRQccu4UTUKz6s.VjiKm3GV6N9JyhvS8raTxuZFtkqZM0REtThOXGbTUXt1x8yc8uX81zZvI1Wzhv.EsN6F80Keiq6ut4nzsJ2yDaPvVLA_0Nxqq11k8EzgMZqaKASeSo76COLSyE0mQEqj57NpDG8Wcyvj5_fifLZ51qWiCBxfiJxt5QVTQ.3.aiyNPC8O9SuPo.8pVTph3e_px5RdHTdcBbLjF8NnKJe6lj1O7fEpMagGpUQEP0bd4FmHteKneA6OlLKK9Ney2Ho6T9Dj6uSYhyaDfWdz80HP2WydT\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:48:55 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IEIBYd6dvzHHYkvVuGe0YwItxXhyhr9SPuDKfHmjdu5auJJ%2BB6octxod9wF15H1HGxf4ocmNlfE%2B8wgzTgyZhfZ3nTHsTrykBwBGkWzTKZS%2FM%2Bx%2Fx9%2FQbyOJfsm6WSejqc1hcI1k\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12d7ec52a0256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":860,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6f61f22317afbb92f5e3a24a3a72317c","sha1":"f07ed06ae075b96f603fe508464e13f112b16daf","sha256":"0382b2c89a05b1ff55551756e4816f0cd74454ef3f2af1f17f3cd8ce14880fa1","sha512":"63ace62cafd904c0ec85a3f143093ba95d4a7af659be309ed98135cd11251bbdc7ddde592b8baca61bd568d701aabc36787f6924e3529c75547e97de68060d88","ssdeep":"","tlshash":"8ad02b9f5043a3874812655079c219d3278d62faa43a85a83dc6d48752a863ecd9a98d","first_seen":"2026-06-28T14:07:53.600286Z","last_seen":"2026-06-28T14:49:25.483197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-hemen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-hemen.icu/favicon.ico","fqdn":"marsbahis-hemen.icu","domain":"marsbahis-hemen.icu","tld":"icu"},"ip":{"addr":"172.67.180.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marsbahis-hemen.icu/","date":"2026-06-28T14:48:49.253Z","timestamp":1782658129253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-hemen.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 09:56:06 GMT","end":"Tue, 15 Sep 2026 10:56:02 GMT"},"fingerprint":{"sha1":"42:9C:FE:D3:AF:0A:7D:FB:17:39:FF:ED:12:A2:05:96:46:CC:0E:45","sha256":"A1:9A:9F:04:95:8A:55:27:14:CF:84:AB:18:A8:39:2D:E0:B0:92:E4:47:AB:58:1E:E9:53:C0:42:0D:11:E1:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: marsbahis-hemen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-hemen.icu/?__cf_chl_rt_tk=dgTsZhzCMord5jvPUKj86J6vcUaDJBo5WiZldpF1Az0-1782658129-1.0.1.1-pY4UTxY2HBfjSjcWga083hqJ7vxQXPB2Gz7dFhwpDvs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-cXq5wyMyPX0mv5zQ2U31SP' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12d7e9bd82b56ae\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ovg7voFIyY23LRUvjDpufI%2FnYcaCCBPN7Kn81bAQIg%2BtVuNhjiwU3%2FxWnzm6TOf2UyQsjYhyS67Z6A3CguU4LqfC3PWSUOsG5IvY72s71UFEglJqYrsE6PPKswDZRkPNIXxVtrVO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 14:48:49 GMT\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a12d7e9bd82b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5912,"size_decoded":5794,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5912), with no line terminators","md5":"095062e1663e2065ce8638a49ceb5889","sha1":"43f1f8848442c2078143ca438ea5c758e64795e3","sha256":"a2149f9415572f1e2276f2bedbd64d0c7aafb97c770eb43cc1f6aea43d8a7889","sha512":"36220baefb77cb4921cbbaecf60fe1e244db2b7f79766acc9848ea6fb8dfb13561cf460b704a19f5c15b7c802121aa00a41d1a60c9e7fa26acb5e0de13252438","ssdeep":"96:PNystoXZzIEb0EaW87sY0G0ndp5zqIF2ttuUXnS6qq+ieKFiyx4vU3zSYzueh8Id:PNltkCB95UdrfVUXnSjptewvOz/yFw","tlshash":"7bc14bf7de31451743782f81147b735ca121b2acff08a994a6d1b62c4beef8a418c69d","first_seen":"2026-06-28T14:49:25.483836Z","last_seen":"2026-06-28T14:49:25.483836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-hemen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2020341019:1782655223:SMUFrKWSxS4nhBLMxqT6a4cAETMlOQVLBVeqagoDoD4/a12d7e9dc80d56af/SdNAj0q_4SASWz_STO4.Zr6IyF4yyB0j6OSwtqbzXgA-1782658129-1.2.1.1-p4HJZGdnSupexkRTTxU6oFo54X__5IgFUH6v0v3GxVlrYWl5U2bMog8qbccQx44Y","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:48:49.917Z","timestamp":1782658129917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2020341019:1782655223:SMUFrKWSxS4nhBLMxqT6a4cAETMlOQVLBVeqagoDoD4/a12d7e9dc80d56af/SdNAj0q_4SASWz_STO4.Zr6IyF4yyB0j6OSwtqbzXgA-1782658129-1.2.1.1-p4HJZGdnSupexkRTTxU6oFo54X__5IgFUH6v0v3GxVlrYWl5U2bMog8qbccQx44Y HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: SdNAj0q_4SASWz_STO4.Zr6IyF4yyB0j6OSwtqbzXgA-1782658129-1.2.1.1-p4HJZGdnSupexkRTTxU6oFo54X__5IgFUH6v0v3GxVlrYWl5U2bMog8qbccQx44Y\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4748\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:48:50 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: eJPNG4BDLxmvkvNU1fMyq2iLp8JoaT+elt6du6FqE83kOSx+pVI1Iv6o3ST/ndCWwRoO63v3dHTdJGBcHyqdw79HDhU9gpasYmPbJvAyvi/X37mD6s22RDC6zyqh76LtCSkaLDfGyjvcOcPsT1WRGuKBHIN9K9+ZtA25Q83lIOtMAPVzMjJ+bWrdcGuP+aGG3TJ0d97wc4QHn6bloPZtQV4442uccPD6sHR0fHBEzZAhC656A14aMko113gto6k3ZvRVIdnZ6G7qLrYuC6zTatR5OxdrB1pYQSaiytUqVmjjUHZ6rDrsfOEmD4XaDLO84rfpfZhy5IL39lT1+IMgmZKEwTUBemD7f/cYvh6IsfqQc1vlSOZOa2Tor47tFezFa38hB/0iaKx/Q/bk/w3A6zbuZy7oTH0FEj2FhotjRuN9Ywd9i0s0RMFU16oD/wQ+AhvQv6hZOQYIvZNxCsfKmCgLj2Z4lAqpE4k62XarxDl4Yc71Ite5pXxARI5L8q4cBkqIhAZmWbXM3sIwnVTx+5k2a209Jjaee15CJbSUUyxv51T4Yjair5uac/j2t7YoYvUkj40meAeDnsINCzMBEssNIhaTH2/mcXgOVUngXYc2l3XgcseidzyrDteRqP7w1sZh1L0wI2Fvf2YDBaUjAXAOdRK/pqyDfFV8Mqa+EVCcP1XZQNGLCpfXsGS2T5+YVrhOwC1v2wZam3/eLxMam33E6064k8ac+hdbxlS3N/a1n/955x/6NQDM57WaX1yW494Hrps5rEf0XFFRhw+nvwMfVS7aGdU7VEKxGs/lDXgm6zWNjLiQqNkzBM9EFUhRMa6rxx1wqPJk0QFoxE3/J6H9JWm48dvm51bJkTj2+UgJmkxan0S6ib+kg3Agwd8z$maTcA2euw85B70ATHYtH+A==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d7e9ffa6156af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383600,"size_decoded":288118,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cf799940da2da466f9b88d857c90ed0e","sha1":"4dd56a1afe98405adf963995c3622cb2b5e79fc1","sha256":"b24ac398542c1fce2d2c0f67096036626ede736c6e53783d7199eeca89e49556","sha512":"977478023cbda97f1566283aa28a0da464ef714e4776ec1ee11ab8cb3fbbe90369cfe3ec8cf20869f094b90f71a0fa35c165be593941998b7c3400ca92904ece","ssdeep":"6144:mLERvuCNsF8NUQKw3WT/AZdnFoUrigdqo5nOxJ7Y6AYsDgtpqwAcD7FL14MCOozJ:mLKWLAUQKwqodFbVvUxNYQsDogJcXFLM","tlshash":"f584236f6d267b6c02709d1edb79680318128ed60063e0a99fe5b5c7b41fed44d38ea8","first_seen":"2026-06-28T14:49:25.484943Z","last_seen":"2026-06-28T14:49:25.484943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2020341019:1782655223:SMUFrKWSxS4nhBLMxqT6a4cAETMlOQVLBVeqagoDoD4/a12d7e9dc80d56af/SdNAj0q_4SASWz_STO4.Zr6IyF4yyB0j6OSwtqbzXgA-1782658129-1.2.1.1-p4HJZGdnSupexkRTTxU6oFo54X__5IgFUH6v0v3GxVlrYWl5U2bMog8qbccQx44Y","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:48:51.363Z","timestamp":1782658131363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2020341019:1782655223:SMUFrKWSxS4nhBLMxqT6a4cAETMlOQVLBVeqagoDoD4/a12d7e9dc80d56af/SdNAj0q_4SASWz_STO4.Zr6IyF4yyB0j6OSwtqbzXgA-1782658129-1.2.1.1-p4HJZGdnSupexkRTTxU6oFo54X__5IgFUH6v0v3GxVlrYWl5U2bMog8qbccQx44Y HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: SdNAj0q_4SASWz_STO4.Zr6IyF4yyB0j6OSwtqbzXgA-1782658129-1.2.1.1-p4HJZGdnSupexkRTTxU6oFo54X__5IgFUH6v0v3GxVlrYWl5U2bMog8qbccQx44Y\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 89324\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:48:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: YcSZzyKr1WB3DMLqiCKdL8cDp1esdaKsoIVALNSynmGYxxNKtBAsj3GnHxyOk9XF$eiHUroe7dgu1cAv0FHn/wQ==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d7ea90c0556af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34376,"size_decoded":26265,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (34376), with no line terminators","md5":"803c8dc40018d689f481ecdbfb3fc08c","sha1":"453d93bdca3a810e5c84e6be103b05f8050bd6b9","sha256":"13e5dda393ab58783c88e162f7ff0131d2cc95e6800011f8f3d75d6667d585b8","sha512":"d9fabc9af067c11b219760ce63854c9fcd02613b92c2615bd8f178bbb15748b39551c8d42f26df4bc436bd45cd54042087a1b2f704867df52d7ddec1e1fee466","ssdeep":"768:H99elEB2R0rOjrHKrZNvCG/BCz2hjngUToI7v:d0eAgAjKrT1/B82hj/To4","tlshash":"58f2f20e4c1a0e9d15fa7e072277955f7a02e8bbde20d0f423796875c4af90878e5f44","first_seen":"2026-06-28T14:49:25.485748Z","last_seen":"2026-06-28T14:49:25.485748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:48:49.662Z","timestamp":1782658129662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/39p5z/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:48:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12d7e9eb8fe56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"eb1479cd1084a1c6d2148d627abd6b85","sha1":"be727f4c359c4766f41f2e5e8ffb11049cd5eb36","sha256":"0b13fa3ef5a51f2a3291930b422d85604c7a5e9b562c31f09c948156274d4bf5","sha512":"9d6cc35af4f52e4cf6d02d205e9742a9adf7b7186111524a5541570047ae70b9f4620cff8f6fdef3be8ab6d575bd4bfe491d091a0902c8c64ca5931044c53536","ssdeep":"","tlshash":"55a012d561c0bd2ac1490332c1505130f8311042010212300143d8164816e088694d02","first_seen":"2026-06-24T17:22:14.446383Z","last_seen":"2026-06-30T09:40:53.803467Z","times_seen":37,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
