{"report_id":"5fa48b34-893f-48de-b60d-7706bb7f18ab","version":6,"status":"done","tags":[],"date":"2026-03-21T17:35:50Z","url":{"schema":"http","addr":"backfoundation.cc","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"172.67.174.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"backfoundation.cc/","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"title":"IPOs Onchain – Access IPO Allocations | Backpack","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"backfoundation.cc","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"172.67.174.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T17:35:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"backfoundation.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":9,"request_count":9,"received_data":4238541,"sent_data":4037,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-03-15T23:23:31.668018Z","alert_count":0,"request_count":1,"received_data":87913,"sent_data":446,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"backfoundation.cc/gjnx8wtse.php","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d27602a05e19d56da7aa2168608b668f","sha1":"c5db1cc299939c6e3c59d4621cf4cf6e25b79ca3","sha256":"b6ece1061f23c36c8c8854cebb494662426bf15aaf1871efb37ef62e657fbaf7","sha512":"d1099cdd5ff474adf2d66ec0a2f7201aaf6149cea73485c7ee4301859a81dd3dbadd7036f8ead63494a8f5032004d59477e102eeda7392b8e14fe8d6378fe9a0","ssdeep":"1536:Ysc8YsTBFq1GF8chGf0XSAmbh9PuwIAvW44Kl0qd:Ysc8pB41GF8chGf0bmbywJth","tlshash":"71348399eba3809c8e98264ed4b3b889d5454d12cd5c7457df2eddc1326afa280c31bf","size":231520,"data":"","first_seen":"2026-03-21T17:35:55.193689Z","last_seen":"2026-03-21T17:35:55.193689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17973ed8492ecef680e723b616e5bf49","sha1":"07b96a9003a38ca852ea5bff31e1a2151ad2eeda","sha256":"47686339291258c4cc52893a5463450188c3156a5a6197de26489fe59b2ef157","sha512":"0c06da1fa5eb9b49494b47e612cb4a611ad3791066a29452039ec70f883b81b3db5c64dd0ca6890576765d947ed54f1c2409fa7f1cc0912661b7f2672bdd1310","ssdeep":"","tlshash":"b901496db0361588695b72326bbbc100796b10ab1009d650345c6ed05fe7394e68ff6b","size":758,"data":"","first_seen":"2026-03-21T17:29:55.125804Z","last_seen":"2026-03-21T18:17:01.944731Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-13T20:33:11.191472Z","times_seen":135020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"599aecc972d08889d48e6e7acf021925","sha1":"3f8945d10a11fa29fa4b9a25d373362fbeaeff71","sha256":"9ecf0305881dc9c92fa0ea8d2614e81511d72cd648ca7e14fc598b9325261203","sha512":"8156b02f3e33fda88c79cc1596f2b7717d602d47e8c9a67d8914fd721209a1efb2d6feacc4e27674bd82b8b16d2365d8a5f0d19c9d5f0d5ad4132ac1a7f24826","ssdeep":"768:QITM0HcIducMxbRUNVW9Bii5c6AcwcRA0WLcn4eDw:Qz0O1kOc","tlshash":"491371e1664bd4e89e5610eed033e801e028196bcebdf183e52dddc2352df62858757b","size":44096,"data":"","first_seen":"2026-03-21T17:29:55.130949Z","last_seen":"2026-03-21T18:12:22.461006Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"backfoundation.cc/InterVariable.woff2","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET /InterVariable.woff2 HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backfoundation.cc/inter.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 352240\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 14:59:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69babdd4-55ff0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKFvaF1Uz5r9XvLGpoCegIx6K%2FjExfaVk1WLZYEWznkGspA3b%2BYt5Q%2BOSWcgTrQ%2F6ASooeSIr3AqTujlzxtTuYtb5rcnDHRfGYHDORxJZfVq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfeb6900cdc0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 352240, version 4.66","md5":"2bf3d951bf9d6109437ea0874bbf12fb","sha1":"f55b18fdf5a4fbca23e23010fbe89df27d70d1ff","sha256":"693b77d4f32ee9b8bfc995589b5fad5e99adf2832738661f5402f9978429a8e3","sha512":"9c34339e338bc88488195216a834004c3cc2934896df8a5849c26801a88c7a4c4d84563d9cdae449d81bb379549f69f57c5fb9b199826adb8a88c3eb7d22bac1","ssdeep":"6144:NXxnNQ1mzp/C4K2K9y0deanlT3TPkHW644MVz66Z2YS78Eq/H493abRLF/VBoGuB:RxnNXpq4XF0tTPk2jzRkYS8/GabjC+a","tlshash":"fc742337370464501452c3aca8a70a57e6302de69fda07ecc7ae84e8899ca797f1f74d","first_seen":"2024-11-16T09:12:47.72962Z","last_seen":"2026-06-13T19:57:01.844833Z","times_seen":12904,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/favicon-16x16.png","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backfoundation.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 372\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 14:59:31 GMT\r\npriority: u=6,i=?0\r\netag: \"69babdd3-174\"\r\nexpires: Mon, 20 Apr 2026 17:35:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bH28%2FR%2BLy%2BNw8jVGbLyiJ7RbyRVoCJPaltTWZvmWlPn813wMzA92VDeU9uT9%2BfQ42Z1JhaG4Ih1vF7Y2om8C5rl52Dfb3OkTOSMK%2B%2FY2I7dW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfeb6914edb0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e37b539144d345cfe9ca706abcc0bd5e","sha1":"6dcd56000341beea9fe8a5cc144e055374815299","sha256":"cc64ede16501bc428d70121dff7cd88f945801ce92bfb3650e753768bf9feaa3","sha512":"36a3dafb02fc00372bae875ca171e93b8c93b27bc644d35f69ad109d5d45fa3dea53cf86b8949080ff950e11453deff8f78ab9166414a9e67105e4111ba6430c","ssdeep":"","tlshash":"c4e0f8d49322086885a9851385e2c8f4a7fa6b4e2208190cfd0acaa026aadc4c5e090e","first_seen":"2024-08-20T05:43:10.514106Z","last_seen":"2026-05-16T18:10:23.631416Z","times_seen":67,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/e4287a632cd19dcd.css","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET /e4287a632cd19dcd.css HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backfoundation.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 14:59:31 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69babdd3-ffb\"\r\nexpires: Sun, 22 Mar 2026 05:35:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UP7%2F2rDHU41Aj85QZa7mwEFdwxb8nx0M7Rjote%2BJhgzHTSJseQN0KeAeJ1lljSUh%2FG0gCOyEGXfPqvOfxOoN1sX12bTh%2FQOlXae23kcC0LNU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfeb68c0f5e0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4091,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4043)","md5":"7abdd42d4e7d6d1474471e1967ee6a14","sha1":"930a24f532482d9e04156ef52dc158da218f87a0","sha256":"966a89e7abc31635ea417ac460dc674d8da880fa414ed95a4e0bb0bb1d763a7e","sha512":"2164ed5c64dddb204606fa3979bd731e96344fdfe6873f51b74dd0824d384eb98d1c61c7ffbc58979902e286bea33605bffae770fdc1932ce96e9e6997cca54d","ssdeep":"","tlshash":"1e81dd6232a91225de068394fbd1da89b03cba75e766447ef5f76618c3c70e6021fd8c","first_seen":"2026-02-12T21:56:00.73501Z","last_seen":"2026-04-13T22:38:29.473479Z","times_seen":47,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/ipo-access-hero.webp","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET /ipo-access-hero.webp HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backfoundation.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2938\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 14:59:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69babdd3-b7a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzoiKtACcLpU3DvaQaNNFVWoyhJGPX6I%2F23twHlynlr4o3zVyy%2FL3sN4qqrL8g7RV52QKF8LrHUrWUi0PGfZkyYo4H39jukWYP7dB2CsC%2Fr8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfeb68c0f710d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x427, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"94e7e32c16651690aad19ef30f4f4200","sha1":"c1ad94a473123c1d1a3a3eb0d220e3674947b2b2","sha256":"189b12ff98372e7dad91c244dea42920dc635529f3c598fdbb95d34b34d35d5c","sha512":"dfd1570685cc87b238904660e2e6efd9b0ef33d64d4feea8b7bdd2ab37419d4b0b19cc297b9097a795d094b89f1dbe669f80f6d87a89e7abdba174745e2afdb3","ssdeep":"","tlshash":"f0514c0cfc14f1baafd296febea9de81299114630118312201d74d51bf87d1b3870b54","first_seen":"2026-03-21T17:35:55.181447Z","last_seen":"2026-03-21T18:17:01.930253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/gjnx8wtse.php?m=2956857","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET /gjnx8wtse.php?m=2956857 HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://backfoundation.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:27 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BkFIMZSeq2oIzeDYXbvgpx6h1Gdz%2FIIGm%2FHJh69M8tgZ%2Bu6RfWJAC3OmUkIqS0nZAWQfyHs%2BtxSlDxpd56L9kLOUKDh8FYvilwNYqeMN8R%2FC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfeb6904d3b0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3412452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70080264c46983214713f62f141a3f53","sha1":"a651a8a8eac5e2155c3f02e4133beef05dc75fad","sha256":"d3c4fe8eebd409b4e99df2f12341780b0c2eade00be3f8bdd66d367cc1c63cde","sha512":"03023ea674bf26a231e5843fbced1888e2a70706a44c5f644e8725a1713f7e2e1c2a768e5f981e05fe21332187a6d8e8f9971e28d4e3ad2e8a9db8ba5ecd6bbc","ssdeep":"24576:UV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdn+o:U7OwPEZJsEo","tlshash":"5a2533512da7fe5a0f8ce93478bf6e4329825782848c54ef6572fac0019c37b429df4a","first_seen":"2026-03-21T17:35:55.183645Z","last_seen":"2026-03-21T18:17:01.933703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":488,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T17:35:25.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:25 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 15:19:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KdCRp%2BnGQ9FocDF8Ymt8UGCaYI9VA12J7vpauHO55GcFE%2BI9nbfRbGD0D3vjeCwtAg8Pgtxeb0w64dSI%2BwB7rQpvcUD5cTv4Foki8frKfL%2F\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dfeb68a9d213017-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":43094,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14191)","md5":"173038f7cd010ad3f1a7acb3202684b7","sha1":"9a8003ffa1f539c43b7b8a6c68871e5ccd10f206","sha256":"46bedc88f2129308856beae506996b9f649fd2ace863af4543d3415c72045cb0","sha512":"551ec3d4b0d423731e4225eb04f6756930f479d92110dd88f42b323f1b165afe3c37ae58af515e258ae28581b873a04922590e54d8d7a16e5ff2a092ba52a3ff","ssdeep":"384:wCTQzbemgS19pwUjtu8EqkE9KjUKfz43Ql+1ZfC6k77u8Pur:rQX7nHw+Y4AlsxkvuZr","tlshash":"4b13f9c461a02fb52c036fe297dcda2dd90ba0e3869b458d7bcd09490bc27dc5fa7685","first_seen":"2026-03-21T17:35:55.186023Z","last_seen":"2026-03-21T18:17:01.941477Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":48,"dns":14,"connect":8,"send":0,"wait":43,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/inter.css","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET /inter.css HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backfoundation.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 14:59:31 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69babdd3-2a41\"\r\nexpires: Sun, 22 Mar 2026 05:35:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tLKTnBmOXP9NadoMZzI%2BQjfGaCMcexOnwnf5rC6%2FywnoVyPLC2oxHtgPPcbqVRO43H3oa5BGgHxpN3p0807X1Hqbnik65GYmN%2BgkgXcXFyG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfeb68c0f5b0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10817,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d28310dadbebece3ce8efa032ceb79e0","sha1":"79adfc62a660d878e218c31dcfc7f273d1a878d2","sha256":"bc97c6b7272e2e5717c6aba964238bb3daefccac1a68d83900f58a2e838d9973","sha512":"811bb72d06d1fdde45140d323a8ad19ffac01f7dc959eb6f5b710571adcec00d0bd14880aeb7c75573219dc79b6a83dc2bf692fe6d4a850e960c088271e6be33","ssdeep":"192:AEUyLzUJ0S1xA946HP2dKs+7oL8R2oVpib4a1Veti8mJQyEjJczGXyEjJczGpyER:+wUJ0S1xA946HP2dKs+7oL8R2oVpib47","tlshash":"a5223520693f6b01d0178c2277dfbf127d2d5a26139906b53a2e191cafef4698381f9d","first_seen":"2026-03-03T12:08:07.340219Z","last_seen":"2026-03-21T18:17:01.943591Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/c93b9f87dfb8c0fe.css","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET /c93b9f87dfb8c0fe.css HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backfoundation.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:26 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 14:59:31 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69babdd3-2a54e\"\r\nexpires: Sun, 22 Mar 2026 05:35:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FBlAhA%2F4JQ3iSV%2BQHCZ%2BEgE%2FHjplwvFg4JhdW1YVtbsB%2BUvwUjDZO%2Bsmw9sslLhHkxC%2FTDcEgUivKyVuUte39rNbUgwIjjkKaJYAZdkCVnD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfeb68c0f610d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173390,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"28c675bcd5742407d73a331c2ea4c1ff","sha1":"e576aeb850d292e5f20debfa929cd4ebc52f336e","sha256":"f1dbe1fc8eccf211611e390dd41a66f93c1d246cd4cc33681dd7806f04dd0814","sha512":"9acc3e41734627e3fee2d98fcb29058a24c17b815abbf9cc2325cc85476c7fe13931431fdf80d830bfe08f6679e3dda82d150b2c4c942f4389897fe53a96d6c2","ssdeep":"3072:RGIsWS8cS+owXe10fmHhbGfZMEC2sgJ7qFn3q+AtprAFGo5wOj6iIaEaDNyHNu+F:RGIsWS8cS+owXe10fmHhbGfZMEC2sgJf","tlshash":"ff0494a4b2a8e13fbd23b1fd93acf45c6219b091de654bdcfd14211163d36f229a7a10","first_seen":"2026-03-21T17:35:55.18953Z","last_seen":"2026-03-21T18:17:01.927458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backfoundation.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:19 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:19 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 252547\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-13T20:33:11.191472Z","times_seen":135020,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":94,"dns":0,"connect":11,"send":0,"wait":9,"receive":8,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backfoundation.cc/gjnx8wtse.php","fqdn":"backfoundation.cc","domain":"backfoundation.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backfoundation.cc/","date":"2026-03-21T17:35:26.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backfoundation.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 10:54:59 GMT","end":"Tue, 16 Jun 2026 10:54:58 GMT"},"fingerprint":{"sha1":"54:50:51:C0:48:81:8B:DA:11:86:B4:49:69:15:EF:EF:DF:73:44:D5","sha256":"C1:7A:58:42:90:10:E0:87:DE:FB:4D:CB:15:EE:A1:7D:49:6A:54:02:2F:D5:6D:CD:6F:4A:16:2E:A3:65:59:6B"}}},"request":{"raw":"GET /gjnx8wtse.php HTTP/1.1\r\nHost: backfoundation.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backfoundation.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:35:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDwqZ%2FRbdnAf0RK0XA6YqBEzxaceeEAbSgmBjxj0kV3FVZkzTYyM3spO36su4IrnLKYVHeRD5Uhy%2BDbkrf%2Fw3FTMgL8sWc2Oj9Uc%2BTkPjolq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfeb68c0f660d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52566), with no line terminators","md5":"204806295b26bb4e8aaf67a13ac68be0","sha1":"cb134d0d143a84e76cc0e6b54051820aaea49d03","sha256":"2b3f5d4e739c49e5ed002748f36c3a39892b4952e43f1b8d679b0db4ee8c8b57","sha512":"3e2934e0e686f16546b3f86e8b16b09f3dac6f1ea1b72b47c78a8c3dfa08079e728103ab8c54e0575d78dd43f39d3b32f3ecab1ee47914a599b12f1abe2ff17f","ssdeep":"1536:Ysc8YsTBFq1GF8chGf0XSAmbh9PuwIAvW441mIR:Ysc8pB41GF8chGf0bmbywJhA","tlshash":"51342f49eb76735c89883a4e90a2f449d7c54912cd5c7057ce2edd83226afae81c31bf","first_seen":"2026-03-21T17:35:55.192067Z","last_seen":"2026-03-21T17:35:55.192067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"backfoundation.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}