{"report_id":"60073128-2773-4e21-843c-ecfe6749ec70","version":6,"status":"done","tags":[],"date":"2026-02-27T06:17:25Z","url":{"schema":"https","addr":"sale-id6284729.info/","fqdn":"sale-id6284729.info","domain":"sale-id6284729.info","tld":"info"},"ip":{"addr":"104.21.65.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"form8765.cfd/82617109654","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"title":"Just a moment...","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"ad07559ec05bc54f3cc7645f9a2658d1","sha1":"a1625271cce3941a441d9bed2d09be6460cefb7c","sha256":"abf4b39c13bf1699b991d6b798ec67ee012776ddf5d43a8f6339a32f6f39c609","sha512":"7cc1668a7d85f1590338be4bca0d537e2251e43b62ae3e81804907622ad7418683801947acfeca4d8fce5cf1b8f2670e6dd05cfc0f231aa651f1603109525745","ssdeep":"","tlshash":"1ee026fa5d7ac83469a4128620b1e29c1660b1a0b711e70842d9dc3bae11fdb4c9294c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-02-27T06:17:29.549289Z","last_seen":"2026-02-27T06:17:29.549289Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sale-id6284729.info/","fqdn":"sale-id6284729.info","domain":"sale-id6284729.info","tld":"info"},"ip":{"addr":"104.21.65.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T06:17:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"sale-id6284729.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"form8765.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sale-id6284729.info","ip":{"addr":"172.67.163.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-27T06:17:25.507315Z","last_seen":"2026-02-27T06:17:25.507315Z","alert_count":1,"request_count":1,"received_data":16550,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"form8765.cfd","ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-16","domain_rank":0,"first_seen":"2026-02-27T06:17:25.510588Z","last_seen":"2026-02-27T06:17:25.510588Z","alert_count":6,"request_count":6,"received_data":91901,"sent_data":3552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-22T22:32:51.303032Z","alert_count":0,"request_count":1,"received_data":53268,"sent_data":397,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/axios/dist/axios.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ce5d876421069a5aff0627daef0375c","sha1":"8fe993f17a0e1ad26f069799ea9656d3935848ef","sha256":"1dc5dc2d16876c864610002b9def611e01b798c901f303c1450a3a2a4e60f701","sha512":"e571235bcb3de3ba4dd7a5a3ef0ed2c16fd3259d708cefa3bb56bd3c31f87ff11e0131293487bb52457415ad6b89edbc1389ae12b21b8480ef53071afdb48e65","ssdeep":"768:pyCCtCF73UCwCWr85vUHBvwf0CDiBHrjCV2SQGSuSyOFaqJ2tM3Qi6aNXaLvqn:pKCwCXUyMC2BLaNfSuzrKKSn","tlshash":"d333d7c8b7d2f06143a771b5802f510bf23e6926a84d8460f525ece6bcb854e8367f6d","size":52494,"data":"","first_seen":"2026-02-08T14:57:57.974009Z","last_seen":"2026-08-14T02:25:44.915142Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/82617109654","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"750e33e86fc0dd5ab1653735ce6a6905","sha1":"85882a1d43227527300f669621bce4cfe74f5856","sha256":"ee856fadcad1ed8411e0b2e7f80b5265c0f6d4918effe5b83dbf9cb532152e35","sha512":"f79c6367e5396235354cc9dbd3449e6bcab14224060cb3fcbe4d13eec46525858d3d1e1b61250d789619b3f6dc551caaf7833e9884602b8caff8bdd0ad909e2e","ssdeep":"","tlshash":"75f0902f3db2092b477330e4882f2808f0365097baecdc00bc0c49022f48fa6ac90ba1","size":557,"data":"","first_seen":"2026-02-27T06:17:29.568677Z","last_seen":"2026-02-27T06:17:29.568677Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73867454ee7a26ecaf1bc36c4f4fff43","sha1":"6b3d780bef66b75d7c1050a1e299d7ccfaede1fe","sha256":"b7ab2181382c8fda9eeb5dd3da076392ca0e29b983d0907f541644bebb045049","sha512":"a5273307ee543829b25a65ec687e842cdf54d5163d6d405917543e879c2ac8637e7b7056fae6be29388435df2193165d910364c88060587583775e96165244e4","ssdeep":"384:nppW/ChqL9579PJ0T4TpBjwv4JIuoyOAimL5uMxzbsDZ5ghRmPMJPxP/EZaGVZYC:p8wqL9B1i02zqKmts81btKHnt","tlshash":"3fc2d68d7ee7341853267ab530bfa44ae32efcc93895ca8a8500d2f07ce1349855addc","size":27843,"data":"","first_seen":"2026-02-27T05:53:24.656581Z","last_seen":"2026-02-27T06:17:29.568124Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eca53cbd7941bc35757140edd98c6cea","sha1":"4b91884df2575203a25c09eb4da13011562bfc33","sha256":"1488b27964f5d7a650fcb89de2bf824fc0f06911005c257134b09edae01eb8a5","sha512":"ca824a8521b9d66f1165938c25f22ed017d4f6276693cf671010a32031a4a8d8a40d6ad40c60dce40e7604ed7059531656375d823474940f833340e06966bd24","ssdeep":"","tlshash":"3ed023795d75c8306a9801461176d394256071507711e30482d9cc3f7e12dd704f595c","size":217,"data":"","first_seen":"2026-02-27T06:17:29.570011Z","last_seen":"2026-02-27T06:17:29.570011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/82617109654","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"497a80e39de6e3c7a46b8f4fd19d02b6","sha1":"99f8d7d0a265f8a4b031d3217fa41e224a4411bb","sha256":"bc2e8e5192e2a87b71363946c2531253c775dfcd43508debb0e2d49456484197","sha512":"bfac398f1e879d61c835e4df01a05226099833f6dc70dcbc07b5d99f05ab6dc784d47f4a3fab63394e9abb3b6230251acaef0667fcda84b6c874957f2e3d5784","ssdeep":"","tlshash":"b1c0126b36771d640fdff4a604f947887030901958404249393c05905b66dc43025998","size":186,"data":"","first_seen":"2025-10-30T06:34:38.237002Z","last_seen":"2026-06-07T06:24:31.609097Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/82617109654","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e27f1188920ca5dab55b4aba7c826407","sha1":"40848de172b4f56539b23432f90b0994b00f264c","sha256":"e51cdb9eb935d3ea6081cb1d926b07e60ea79f53e51858afcaeecd03a28a4ed5","sha512":"43e248ce7100eb560009fd982889d48517315e73677d0c18969591dc4714599c9e34643731f5e54b016dc97b26c79532010f1e8f1af80e85d2c0b2142161cd46","ssdeep":"","tlshash":"c411c0797b2a6534cac5418b317ee7a93d3260617b02e144c36cdc299d58e8714efcbe","size":902,"data":"","first_seen":"2026-02-27T06:17:29.57145Z","last_seen":"2026-02-27T06:17:29.57145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sale-id6284729.info/","fqdn":"sale-id6284729.info","domain":"sale-id6284729.info","tld":"info"},"ip":{"addr":"172.67.163.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T06:17:03.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sale-id6284729.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 11:21:05 GMT","end":"Mon, 25 May 2026 11:21:04 GMT"},"fingerprint":{"sha1":"3B:59:2A:5E:83:4F:8F:DE:8A:DE:A0:E5:9F:2C:59:91:06:30:A7:3B","sha256":"5A:02:BC:35:A2:3E:07:07:C0:EA:14:52:CD:72:95:4A:B6:01:EE:6C:BD:75:B3:48:0F:AB:9C:FF:F5:12:39:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sale-id6284729.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Feb 2026 06:17:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://form8765.cfd/BxRNOqCfF\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Accept\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AUBiJUWi%2FH6NhfB9pvzdHS9kQdMTMa27nA1wpyJb7q9HXyXKnODrc22ardfrvIKOUIkfwzdZBOWodpJ41WHegth8w8kseXIT6enGPJ6sodrEW4%3D\"}]}\r\ncf-ray: 9d458e985c91c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15949,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T05:30:39.453967Z","times_seen":18007422,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":85,"dns":71,"connect":1,"send":0,"wait":69,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"sale-id6284729.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/BxRNOqCfF","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T06:17:04.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form8765.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:23:49 GMT","end":"Sun, 17 May 2026 13:22:21 GMT"},"fingerprint":{"sha1":"4B:95:B4:1A:7A:7E:06:2C:97:7B:D7:EE:7D:85:F7:85:F7:C2:8E:96","sha256":"2A:86:1D:CC:DB:10:3E:F6:FE:EF:79:C1:02:AC:FC:33:F4:39:38:FF:AB:68:7E:25:07:19:79:AC:CA:E9:D4:D0"}}},"request":{"raw":"GET /BxRNOqCfF HTTP/1.1\r\nHost: form8765.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Feb 2026 06:17:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://form8765.cfd/82617109654\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 96\r\nx-ratelimit-reset: 1772173066\r\nset-cookie: supportToken=cq199met0smm4i29v6; Max-Age=604800; Path=/; Expires=Fri, 06 Mar 2026 06:17:05 GMT; HttpOnly\nconnect.sid=s%3AEmlxZFlySgxGxXXOgGGZGqAqav6svBsw.WEf0Buwm8sFkQm4a0BMtEeRxchWOTL2cTMvImYOEgeU; Path=/; Expires=Fri, 06 Mar 2026 06:17:05 GMT; HttpOnly\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w42XOhMTpfUeaE6TQ15xMGWDzb%2Fp69h9AmsZFulDRVVgvTD9fmw7urla%2FS0mE%2F1q32kT8%2FiE%2FId905MKEGZAGvUeWl6yrGOUCthOvg%3D%3D\"}]}\r\ncf-ray: 9d458e995eba0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15949,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T05:30:39.453967Z","times_seen":18007422,"resource_available":true,"data":null}},"time_used":1533,"timings":{"blocked":80,"dns":59,"connect":1,"send":0,"wait":1373,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"form8765.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/axios/dist/axios.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form8765.cfd/82617109654","date":"2026-02-27T06:17:06.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/axios/dist/axios.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.13.5\r\nx-jsd-version-type: version\r\netag: W/\"cd0e-j+mT8XoOGtJvBpeZ6pZW05NYSO8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 27 Feb 2026 06:17:06 GMT\r\nage: 15372\r\nx-served-by: cache-fra-eddf8230140-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 19381\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48198)","md5":"2ce5d876421069a5aff0627daef0375c","sha1":"8fe993f17a0e1ad26f069799ea9656d3935848ef","sha256":"1dc5dc2d16876c864610002b9def611e01b798c901f303c1450a3a2a4e60f701","sha512":"e571235bcb3de3ba4dd7a5a3ef0ed2c16fd3259d708cefa3bb56bd3c31f87ff11e0131293487bb52457415ad6b89edbc1389ae12b21b8480ef53071afdb48e65","ssdeep":"768:pyCCtCF73UCwCWr85vUHBvwf0CDiBHrjCV2SQGSuSyOFaqJ2tM3Qi6aNXaLvqn:pKCwCXUyMC2BLaNfSuzrKKSn","tlshash":"d333d7c8b7d2f06143a771b5802f510bf23e6926a84d8460f525ece6bcb854e8367f6d","first_seen":"2026-02-08T14:57:57.974009Z","last_seen":"2026-08-14T02:25:44.915142Z","times_seen":315,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":34,"dns":1,"connect":13,"send":0,"wait":14,"receive":4,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form8765.cfd/82617109654","date":"2026-02-27T06:17:06.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form8765.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:23:49 GMT","end":"Sun, 17 May 2026 13:22:21 GMT"},"fingerprint":{"sha1":"4B:95:B4:1A:7A:7E:06:2C:97:7B:D7:EE:7D:85:F7:85:F7:C2:8E:96","sha256":"2A:86:1D:CC:DB:10:3E:F6:FE:EF:79:C1:02:AC:FC:33:F4:39:38:FF:AB:68:7E:25:07:19:79:AC:CA:E9:D4:D0"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: form8765.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: supportToken=dop7w51obipmm4i2a86; connect.sid=s%3AEmlxZFlySgxGxXXOgGGZGqAqav6svBsw.WEf0Buwm8sFkQm4a0BMtEeRxchWOTL2cTMvImYOEgeU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/7f3d2ee44814/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Fri, 27 Feb 2026 06:17:06 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d458ea609a832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27843,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T05:30:39.453967Z","times_seen":18007422,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"form8765.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/cdn-cgi/challenge-platform/h/b/jsd/oneshot/7f3d2ee44814/0.013336174541291865:1772170512:S0b7UcCMEAdFIQB0ATmabc2PIBFXIpKSMWiTXpjgyjA/9d458ea1fa4e0daa","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form8765.cfd/82617109654","date":"2026-02-27T06:17:06.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form8765.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:23:49 GMT","end":"Sun, 17 May 2026 13:22:21 GMT"},"fingerprint":{"sha1":"4B:95:B4:1A:7A:7E:06:2C:97:7B:D7:EE:7D:85:F7:85:F7:C2:8E:96","sha256":"2A:86:1D:CC:DB:10:3E:F6:FE:EF:79:C1:02:AC:FC:33:F4:39:38:FF:AB:68:7E:25:07:19:79:AC:CA:E9:D4:D0"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/7f3d2ee44814/0.013336174541291865:1772170512:S0b7UcCMEAdFIQB0ATmabc2PIBFXIpKSMWiTXpjgyjA/9d458ea1fa4e0daa HTTP/1.1\r\nHost: form8765.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12149\r\nOrigin: https://form8765.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://form8765.cfd/82617109654\r\nCookie: supportToken=dop7w51obipmm4i2a86; connect.sid=s%3AEmlxZFlySgxGxXXOgGGZGqAqav6svBsw.WEf0Buwm8sFkQm4a0BMtEeRxchWOTL2cTMvImYOEgeU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12149,"data":"j2Ysb5u+NcB44NF2yFGcNN4GnUGkGzsUm6sNyGlsxFNeFXmetG9sjFs-XG1GRRGynR+GQDNw1Gckiu7JMCYuxHMaYGVddzl6GpJqzcGmwP046SMXZyUG-EZayVQ526GIYorrD6+6KFOWm+GGvV1Hvl6YumxgmlbZG8xDNGVlBIcdI7wMU2qMUiGuXlxq08xdFGzOt1UC$iF1iIrlI+GzEdGNKGIHjbGyaytJW6jW-fDJoNcek2SSi+GzRIGGKqqbJztfwwGB7hm+TW+HDGuO70cNU6Gzv+nyv6zlUGjpmZUhxeMQz+GNaIcy2Rucdwplp2euOGzz+NYhJ7DGuqyqc1Ys$PmIP0IUG1HdGPC4lUGNd62PkYXluUGaIZebZZD5rO-mO-UhZfdMJa-NbQpcqNxdXdMCZDNPeYYGsea$gi1sGqdwNsJUvX2UUO-wvAUctX4EJvJoK7h9kUG+lzYy62eps4NLcMMYEGuQT655adMHgfr$if$PnWPeVdVI+9Ty+0hf$GyYl8bmNMhUSww2sBBhvxctM2DCl$yyoUY$PdZvtsu4-9ZwfbtMV4yEZZLRcqrIQQTZME-cWtG4gCFEGGmHlzmRWLpWsmT6AVDo-KV0+ld1ZnGM0ht5OloRfI+UlXgOqeJL5S6VI6PVW21gKtMFmz7Kt-uScLuAfgWcANhwv8Spm5mKsDR$5RH48ZGnu$SAN+B0BHafSJYNVIzxUmlIzjXBA+K7jPPOYSCVtmw1BUEhGAafRruz15gV7Uh969JZp8uIUYz6GP+wMUMUwPUnqNUwbgmyx9GHh8ysDU4aZSUKFKUPoOK9zU$DkB4FDOpZfmZNOO6ngGd7VB2IqecePGyu2XDWgvUZuU41MZU7MsLy26shqNxDhX21M1UY+26X7Y6DPwU6qNUjM9DXbsDu2XlYIffUgMGIFFaYOl7E5XDDgGHtrqU+6GV4Eb45lj0nuUzlfgGll6ey82gsNRlezYUDpq5$ty47ydm6UJuM5UkqpqUzWe4NSWlG-wtQsNckURDGnQ5wvn+PI7X5RYnq+UlIs5TUvT$tqInms-AY0UNrnGs-226T5JWL4WV5ZMlUZWU2zlAs2gni5Fz627+gosh7j$nw$P2qrnNq94ysuPnqGTGV7auquzuzD+qIPUjsDW2omF8qZPX9lXZMXq-yMIFksiR$ts7vYOs2lc+lwBfHu59MAmG6tWwn+y0qdUYcuYa2owVPYPIy72PV$Gu4u$RMXlljtZbNNRezQfKkMegUDsJXU1hlNFEHbUCSGVUMWPmRfxDDNIEy6zdzo1gpcYmh2cGiwWkDDUY62Y4wz6UIONDi1$YmbMOdUFtl6-AbvIZK9qjW7TB4GYoe-1Ch2Y6mBGY2OreJGmO78D9nFUD5lfXZ4VLKsOmGcWrYcUDs8vIURR9XGLkKFs+BCDswUUjeuQDNaiPvIQiufre1iksSZATmsDwJJGsk2IDiBff8WAXzzRgHT+90HWRQVH5afYO1aWy5deC8oYLW+-XGWH1dAgirEHD1rq6VPrRzH-8XDC86EAk-80GxAPL1G7ZdPLNGwLMqDPdBGdhMvGNx2xCiEVP+dsXymS+yTuuwN6N1SvUGSu7BKPFM05GF28sR5S$4BTzs5Dh-QV5NHNpGGCksYshYwz-xYz7auBF2z7n6zsVNVNOYpwJIWOF0NNz-501$B+voeZ7H6ZfBsqBFRYytPGn9tUX0UWX6s7qFPAUcnYjhMqGtvZSGiNDxseNaOfbQl2Li15hd2qeU6TgsVQOKn2DWHcbBXMHJ2pOGIobDqcc2+7KZKg1y9TsnU4MYX2y5kU7XI+XRDJYkafWnKvJmz-PYMshIOXsGdkXvstV$yizFnnH7bUJQQZqjXeYuV$s5NhyGYL1EWRZU$bsY-UtWuCO7GUwUmj4mZUNbULMFu1uGvMJmdMcVKqUX+ERPIqumuiMc1OdwVGqB-I+gHPh0X+BPU4Nvj1xOoMZVdqaH7LGK5M$OI4iMSGJ5ojIn4WcSchg8MGG5z4IMWG7g-BEU6xZaWaOW6GnlUxY1duImlMI55v4tsl0tyNktm6dE$52Hc4c+i-kDYgXzUuTdeuVJNysZf6pqmuVVmzetvSwN+Vuc0MW0dQMsUVfSqxaF6ECIuP6JTOLtplGh9NMPd+RGGTVQQaenalwFO$D6Tq7VpuIpIzV$HJCvN7UTIx0FJJHQ7NAf-WwMPPj9V1dzYNMcOtH$emz4OIiu7Y6j2pMxP+bWa$R-pCno-Pi8OipQqiuMSfh47aRuyovT5ud7y1aGhd$qkxF-GKlwGRiFKcj2IswID1O+$DOFDOmlmFw0RFuSQ5jzI5lQOjRX2zjjVU6+saNJCTHRPG$WWQqBBn++2vkVaT1$dd26sbyHc7RMhwdSlid+t0Q6dDSchGVb0QaPa8$OVJ6whMaqsqwS6Tu5GP2m6SlsyUx4ms-9eQMTW91X6VbK5414tvsuNTjRqEjBb1U$gGOH7lM+$DJUbNaEo9Hns6E2kkx+XNNma6$tgDmHpsjMc$F5PwM6IQCn+GoT4wGdc14rF5NxksUicdVuhzYBzMmBgNukTmfZcGtDfTX0BVDrqAqGhoeY$gIWUW1R9xFvoawXkGhaYGYt6ppn1XGv5F6KcgsNRUp08CO0WrN6zAlJXWuqlxF92bNNKr6-nHclV+1P6Kb08BDD1gG+$XzawIvUg+P+W0xQREfgeuosY-e9V+DuOYyUb9sdCaUscJictkn2I9rFmaxiAsBb$dFyM0g1u2hYt6ZzY6BN$mv8+xK8e6dh0JVNdf$W0sRP+CrrcyaJlVsKZgQV9EVNYrFrDUBY6WvXvBy2a4XdQw6N14WNDG7k$44RHWt-J5kDncreQn8+L2W-JRNd+DHVpOfM1SXd+6Q2qmB4xKyRXkuV9cFfQREx1u9wBzpPUp-yFkzqNuFbt5pGMZuAGcjaCQTqaNI84vOrYlDfU7wfVCQzW0rptr40deONYfMNymgFYDzy7Fx8wNw4G6jaGlNFbshLR$JYSjQTR-si$s4WTKoBe0$InRCMZCgpVWq8mDZUUEa6s0Akw901Ugg-dy9ZG7oFxkeHEpcl-bsYts0nphyFDlE-QIMhmgRBNB-vToQN8hp$DzD0lw4W-+HBfCjHqNGN9CzPVyAHQEyHnKmzB5HAxt5YVdadznXvghYC$X5snd4s$OEBmVaX9b+7DcIRprZc6w-QL0zIiBOy8nLXVQyVBMnOPV+wyhfHKDJtOrturGl0fiIYlHYu4r$uOpMz7+-SquVUQlA6QsKyaMV90l2twKKgnS6ttVkeXOC-4zmNpBGlBii19VcjsnEWS41IIrr2YqcDfef$4tr4xjONFw7PGgWn-l7O$VXRTr0TJUaEoJGW8kp7$l$YuVNcwNn$UUBB-yWBuyoGGsFOF-Y5fkeO5GYVQb0H8nbatPfdlM8nrhUlkaihVIDhL9tOydzIsz5dxdhniYHatUDz5zizsMpdCxRz4dTuV18BgPRFxNtB+dVykOsuy16+s+U+V6dl9lBcTH7dTFeQ2a2kBHB+s4tuTVX+BYGe$UkPTFn+RIRyd+FFnceVZV79hUTNfFBV7j2uA1WQ-GZcuIGD8hUQDQsBJcjaxaRzUnahazqNsjzclQSM$aSlF6sdpNYPD+UNxkw+rPauzf6xs9w6dBs49hVHBVGAs-h+GCryseGLVMlUkN8P6R79QIFPd1Tx6g-ciBxab+wMUBrylcInPhMGdNpdxHc+Eb5OvdxnU6QVsQdf0dAdwyAVPc9kEPIUtfPha9iYZawuUdH1fFxItI8lSBDKoOxMGDz+Dvstf6sf6pUuVGthcIYLxOxy7io1F4CM5jYdwVs8GFFgQuYgVGgz4BDTDiEHDXGaqnOlldBNadXI72HdDT$B+a2hgydkqbCj2zkcFSLkHlpQpbszAVrIjBAxQjRMnQZNzIFd8+0y8UWIUMsybdwVbUxhM1O1Rn249H7M6fJbGTbhsjb9rQ5Q9fSzFR7GT+U0BYj+exqIDfAVIf1zHYbIU1pFkf0lFYDhM6zlG48Vd6xaXSmBqNUBTf0y98YuGP2EA8682-k1WOsBDsdYdFkFxy8awF2lsf6Hy9oFxPaV51W+wY2JaumyUY2stUraf8Xtk6tBfI6UGo5cG-hPJIWGO2ODs+scLj2rJIUY7K6NO6z9qHT669qVqbwzT+OLWxYC682Uh6bN0YOj1Vslsj2atuq6z8Rk+PI6s04UE+VdBB8Vsb8Q5UkNaNUTXpMNOGYGGwU6xkqP+kd8G+PYDYnY6aqc2uk6cvsH77rIsj0GUPe+w+rGt9ql2IsHVQ2XnMv5XWk+cvFAmzcLOWBk7VshsHcWokRU6AXi9deUg82IdGoa2Fo6UNxawYy8v4Gx1z6hLa4E9fD5Qn8UX4I++t$dxQaVsQxQRH7juyUjkNciQnYIJ1AIIB4qjQULUAYB2PdId1K$zxgk6CV1Y0Q1TxPVrzcErng6lQmk2UkazO6a44OsNiGwUFFvGLUjT86BU5q828GbAyj+7MGesrB8KCYTxFGsNWXas9+z5M7AKqAMAd5$dP7ipcm+4vPd4gfy4WPf+vvFw86ciNa6-NDM5OvbVBqUDW7$ph-dna+5NwrdNoFJQ9VhLlCQJHFS7hIwsPsGD8OCQfXefFP+nlwOUv6JhQ-c8BWcIH7mIeFdec6rWN6Ahded+DRUGNOdsPwz$DGoaQsMAhIDPctnFpsh+iU4tYAzSBydQ+A1euf1$tGS7Rc0l1U916VY25T8Wjc$QNsCQfcL0FBuUn$ksu$bxIWuPk7l2MFUDIrQ0GRaClA8Dd6o4wP9$6$Z-6z1bBEjJufIizWC0dZb$xAH$AQxYhgHGhxyujIpU8rdUmlUD8FoD$U+LPdyj+D0Mf0P$ijyv4jHcYXxDVsugz6zGEjnhUkGn0ENOMFj1PBydGFpM8YNszN2Pu+7jxhcYNflC1pnc2HjbGU2SPGbdXWb9YXeLP28YdMMd8GB70jUkVYh7Ms95tdMWAzUdQT1Yk5vUR7nAaO$dCQdIZFAKsta47BjdiXJ5-wzNNYlUe$WeF8Mp9dewpYmnxTawihxQUEURH7tnG6xTYdCK2-KU9hFF2+88GDny5aNFB0hdJMlTnO2db74t1OY7zal55uO1ctYwXItXT$lWsgzyQm8EUdOyA$kYb$+61dMozEMS6sFAByV$gSzn5YZpgDocrhKqx2OQHrO+sO5-WeNakz9ha5755a+diFKSdxGof686M+5wDF48GGWVysO6NF1Fa-AYI5BnT-vvF0liOvcX$eNfGv4NL08YjYL5-7RyzsdFCQYKJQf0UFFBOB6sY644S8OcvF$DNFZSlCMej2Inoql5kpcKLnK0MCPzlXwsS7Xkxtbe80PYAY9jYBIi+Dty-Hby5OJUeNTblTNYndpszgY2PHNcWhPN2vCi+lFfcUtpRpE2QdvjVehaHAx6haupEtUWt56w6YKqMnMOKrIrjfGH9c7x1dW7l-9HG$NkHpeYjvBvBXeUvzzU1G-sIjyez-86hLnYCV8rMYsDRvsGowYp02G7Cv5EMU75sOET1UlvCkyjfLWSdVlT1r8zPnvcDzyeCylFPex-2--qT51Of1X5WxNUR6Iq6db$5O91VQx2HdfeIiP2fQVdaANfU2$i17Cekrk7TUKwjpW6XDbzNlspnsl6tWZTy+psnyARUW6abhzUTd1P8KCxdU2U5fV7V7P2MV9h+rferybuIya68ZqHhSGN$U+XWUf0Pa9-L6Nzz-atY22BYXyMdcBlDLXGF1Z5VrylK6j1awxmyDeYF2yB6oBDqZZ2zUYadp7U0ZNfa4C2r76+vuoyihKqGtx1-wXcpwswqwtwtQUeD7GDYDuV+$0JOc2lpuds4WXn0oQABEui9x9EVEHc544P6I$Pj1+fUkuPMPYZOTPa6yqiY2rcWKXWOQDDFD8ISO0JkdlshUL5stdXxnAK4WQfIs+-cFjD5fRy9h+Dwu8m+DS1wls4AY8g8Hz994TYCw+r9e$iz6g586pDOeM4es5slssUbj8uM6+hGfGdgdx0QZKcgvDe$0P+k5Mmw0VDYP8Ks6CXOLA$bs6DAwAmMepMHAn575LdwDgyGdMdIdzlsOuFXI2bkw9FRbxu$l$mR6nmKQv+gy76+1$DH$pNiwsw7hRnjnhNE$$iVeoeKwQzXkP7Azf5qPdcGzeTUD1uKsMfq16vpvXvZ5WWgRpeWBkRL5ZCNqXpr$R9M1d1MtR9+lfrPWGDUklCFewgU8Va4mkaXh7gzI5eAo1$$CV7Ukja1QuQU6FQtdt59dQ9y4ptTxkwPTFCNGrOmwAxystnz2j2zs2lK7P5lvgHYvR1pMUtR7Yd5Sa$JeKcX7DeWl4eRwXvwKR7UgUWzOTgMiQ77QmEMjVQsI5Ph4WXfHGml4KcWIDurypETsLry2mL4rYTOf+waLDCd-U6FZ$DBpqGvwX6cYVHf0lO-sQrH$CHIUjEIJPWQs9HP5dq05M2BWoB82Fp0fqUjlJjE2VmO1pX2epRth4tmsMDk4-ELmGFNYb$fUUyrEHDlhvjAzaD$MZ$eAx6ym0uouipHupLFVjRbTucWHNDuFIDx-KraqAzH1qqJ9DCxtmVBwqjEnOhpBve5eU+Zp5aYh76uc$JPIGzljllx$PFvkxeAwo$psQmUEZ65OfHx$kU7C1mILqapmsNX426S$vAlEHjq9qVjEcD+raz6s+lzefF6ZrsqRUvLvr27gjRFliQHVK1PKqcR4PB97dbIvLUY2ZRpZmq89WiTB0fYW4tIQ02Rpdp0ZZtgdAIXacaaMClLQOs-BXZK0u1wvWhoPVQuVPwejZL55EoIq6UU8f6Pf0teYlRVCaykYIK-oUWxIZVUz-Q2nEvBM$7NDQT-XKqPOZ-GKmAlNvkF+HCpNsJYJUaofZgRNeOWKJRbn-QhQhEPj2QWXncm6P8U0vdtddxIQDzxRvRddkIwjFwY2kwNz55E1o2lM6eAp7a+doVuIAKA$ZVszJo69xExMRGJ2811Yxm6$UIWl4I4ia4XDxqWpMPx$BnOC2Yo+hWpaOsszL55p4YGlXdkZX0O66xniRjSYoYyipLezMpPaHCDklmQN4t-Dwo0lz2OirPetFcg6Wt6eE0+6dqCyWaNR0Uzgog0eUJ40KJpi2zRUdCE2MqyeC6UIqUl$BINH5rV1KkeY1-C6x6009v2NWZS8F+FeZkDJUKA0MzNMAjb6wUuVGrb5fBbn+aAXBn6MfU8eexj5R4uGM0$WSzv-EYUkH4whlOq6zOCJ1HhL1OxDa61wx$Pftg7EgVTobV7dIWql8VDmk9zS$sBD79kW1lqlJdMlDU6iqdE2PT6+KiDl99NKt4R4R9MCKra4rVUWyzOWjt$MT9+M2jvQzt5fGQYQz9VN7P$Wns5OS77wirJreSXGaysFQa00iAk0Ttc549nbvDeOBD584jHvCGtFAYPtxJqRqfgw7wRcAguHWzhk$ty0EQC6u7X62WpMuhi$nswO4YQxo2GE+7LgrQqr-NQlULRuMtFBsn7Dg5s6H71r6YmulI4zZ8l1GV5gDBDpLsk7Ytviq2iHy+MjvJNVt$hYBFMs8jWzX--NY0GRCbq1BO5Qq+F4HVaQP6dYtVMvyzDMWW$$MV1vWLXAFxB4ufBXuFIROPFxdg7ZaYf2FLUog4PIq-ix7MsPFGVGHncE1yBfPGB4uyuA7DGRZIDMOgXPkulGPvVh5gNs0$NT1vcQWgUhOzZ6tup6FQBtygYduj$lpH6IxNOIhuZU1Xh$bsyYQ5CaupDNp1+NqMYUVeYY9dPv5UG96ddLsNywIzNyMtDqKsIYlBhZNiGFqYrFHxUj6lul7q22hY+bs-5DD$6j4IxxQquuzN9p$6D7nNVUqcBKdG-Y5WOdWPi6pOmfu7nlRfsEu-q7Yl7hscgIFBSFpGWBNNzMsPXhqpDa6zOBGNgN$qYpa7IiPSogs$qh-NFTNad$0BT$XDU6bjhJWus$q$BYNdsS7tTNlGpJNjY-OvYoByqMDT$y+bbDtN+qn6CtxU1$yuq0YrRO7aIVMG46lKg5kFzKd9g8GSqpDl5UYNq-O2$6JIkdYaPfguBEsqckQzNxvduNMuQY1UOC0fg-z-WaxM$N5bXZ751qLqNHB5xsYY5x7r6dksLqdqUg2l-Yg-ugqLUM69F7sV5tcBMGgGwURSU7nNPR5zBD7Yzu1PzuuGc5vOO$GO94U-l1Z$vG6jyW$Y-Gx2yFX7wHGjJPB55pcQDU0UgSuP5NL1VxzmNN1m5sN9qTyPxPQUtskl7p22aUQRzbMkYWlafHG90NbYuF6qp6dvhQ0MBGgKfZDK6yy0MGdB7FJ7$DfNcVIw5hsm7DczRUfUq5DZ07otME0eItBB$RGMFd0RXUbNoYOqcGNwMBzVBvZCXPPjwc5nRB+ZxcFeshYH2ssKO12P-11N2ua5FlXDfDn7HDBssaG8UI7hvjZlhmBqH6E7+XMT-2G5e2F5Ze5vBBtlDfeyOF+NY-YE5Ev774DMIXxMnvhljF0sPh1JU6q8lPnycqZykUkgZDXDMWBeMkzXqCDjq6QPCUdzLD$KqFoFyJy8MDqlqe0OMTsu0zelpYj6r9bmUsnzN5cBnOOO7U7G4uP7cgu$P-ZuGGIsMJGNygRVfBfMZDn+GVtcxk6DI8qWslu7y$+NkgBZO$BNaHuuuC6+Ww+BFq$qVuGqJD7sHGPDucBjgOfIJ6$bM0NUwucKnhQyuxy$6DFwYY6IDNgJK$4IV7IcQCjtPHMNGLM1GPIx2zUXsGB5pa6ZyOwXwnKf2PxUSEkUyVDshNtVf5w$ganXEtl4saJWoqcGrurIeG6AsfatgmKnsIon4g405gcIQ+6pFPWFz8Z8GaG4WhwykaZFLuicqwGyNmg45fg4NRGRG4NBDTXMwM+M1DhRPZnNu$sjUXDGGNRfskY9s8FURoHtBO8GnvVhsXlpvFNKgO6PDwho-anF9$GePY1$BpYkUrsJ+dVgKwPM9uC$1UNsjvPlRHpK2qWV6OZFcUm+PNdDk4BSkCE+h1DO7BODuBIu9uyXV8c7zZdLN26vA+C4F1pNQ2hG8Op5QkHPBqVeZDDZjBqvBNHaDerSV7a6yxbe5odQYQwyUzzyDqd2WFDcdCb8kA50Gdv4XNIRzPeQSY77Z2cbVh5PK$6ic8Gj0zzyC5MXkvrac0$FlrITdibV76NBquPOnZK-VH5NBKs-5dtbv7gddbuG6spZ22u$UFX6oT5FlgGx$PvXMwzB9Zdsh+Iic+qMKdQQYFwF5BtXts7D-XdX59Cwuulc1oscDMvulDlmdlrsJGe6zkUD+M2YYxsdEyUudgGDYDuOlcBdBegkGjVNvj6PeBxG$XFdb-O9BOGtqyWYXd4aHB45xuutk61UXkj5o+ZmdJpf5ekcywh041mcNsP01dqwlZud0PGPQucsVDoYLX6$doMhqbuMtDVUGModHzeGwGcaapHVGgRdX7m0GfD8YNcuLuHpZJ1$U+U0ll0B4a4j1lKYiXfMDOHI95aPdWNSDvmOc91ki5gRJvKmdsusUP10X86uvT4C4IzyTUq0ymT+SwgHYPIMlP5S+EYPPyiX90iGeJGceSjky-6nmxUjbuHc+XlYSY1bUoqUR8Zb0oYA$HJWobcNl$KmQsGpbFz9XVQmGaGS$JQUxR27auo+DLFiz9w-vkmZSUWurb0w-vI7GyUcqkBrwWulm+61$yvNAbP0HQrKv6xNUjRcuGzhO1gMauAJniBZGNoH4TPkRsbum4NTKE8b0X4lXdGh1$PYUg5e$mGHmHukPb0XM$bKo+0$xy5E$e0uu4K$uODybo80nzDcyqh4Gwqm0wzyeafnVCp0R6eFqpf6NKz1Zw0+LYsuuWodGa2UOWo+55VLRFa7RWz755pYG62OT2JF75$JPhj9wD$lGgvB6g6WG-OF26+5EundRAd5b+uHKvZ9njQ5ybpm1XYfyf5DaWgCFv+qwbs4+hhuAmlNEZlouks1b0sa$11d2TKHM0-zHcYMOs4Kaubsz6KvMIQRoXvdX-K$bZ9FgVZx08Y5I7M+XezQm$lsU4WO6cy4a6bpseIWhl4d+BEZAQ+FT5doXDOiZdRfsaf+DyeDIFzNs5ZtFeO16hDZmIk1iMGp+aAKKmaP6mMGSWOnbNWTcBpN8xODib$Fm5EuksVQtCdpm9XYhHsH9ljdoYADmmRuwhH0dCRoIpQfSMha1ZuRQuQfnrc4BRdKmtGF7MFUKgf6KmR+FmupRTgvbPRdWczb8b0JGgKGuIDJbxU4Qqu8Rpajhg6euOq6bRth1$M6y5BD0pm9XhzastNgj5zL5d$-6B17yXdWseJ+2HQUwGum$FOeBJuD7+XvdDOqdwUdpMUB2WkQvM6Jc9C9wgZ24N81$uu5pscWJLY+j1bQu-Gm6uQfvs$jDtLy2WodsLz-jFtuNq$JRov4IzKy2gJNMax+ymOFgDoe6Yl+WJ29Zz2gDsxLWYcFIDtfPplMQnj+a94uiRyWusUd4hnn7gRfbRtMWSZkUrsnhW$6-F7tECbpDwWyQi08aN-xYyusAGey6zuhdKaYKsCpDFthgVBh$0MQK4r6yyT4sOuSQuWTpI-THRL0ZDNn-sYPd0wtWSRXDbf9HYjHl$UmWn2EOWIVXvGxGtn07XdW2smWcC9nS$bhemO$TJF5fOEIHjbHR$nCHnSaOkbTJCWBab+ELX17P6gdyCD-WMnwePaZbtCG-+Mn1TIGPdzaUKReNeeJJXZoazsuflDqqzJdLaNWXRYAYjOzWLCMclAbYgSh4uUOP5sCh8Y7OjWTmn--CQK7jHx$62GSji88MONr0gCNWSh4eeEasbkCNW4ua17kasbQCUy-u6UesC8R2z7yeuF1c6v7bJC$$gunweDH$TTafNXCGntbOjT5zU5qah6ePq+cyCaNJEllEXQJTe7cquEhDEVa4bZCuW0qFCZ2akRLzem6F9nTUOPTfjf6+lI17aaIbEWByplalEFvdddaVymlhfE-DdcpmNW0l97tPUdWizchb9hZPU0UnujC7DB6Qv4at0Mj$wLj1MaTOZdJzCI0Ba2tGv2nrzWNABa2tshUnrzNyL0hUe6vfnVc2yt0OUWsvyWURRw$DMXeHz8WAYDhoCb$bNpYn5RmWvtaet$HZn$s0WqEhvtJJhnvE5$WifRrM5kb9tNWSbn0GcCVdqRw-0b6nt1HBdRjCWWTfVGwhtW-EZh0thfW1aodv4byqahCWdvkdhRSFJQf6zhOin1RVUaTk4WnCJbOCWhR2IZO4G8g9a+sx5McMrybn9cJYrzxD4t$LFyGMNXUuFN-Vknf+DwoF1eUfuv5$6Tn2DqGuVBRuosZIpjkmVrUoQMswzPFUiB2NPKkph7rR+jx0q2zke66S6HQySFrVXE+nooVN1gOuGPEIYwV8ujoFKWpadFVDxc5UN6GGGi1gtMViqFGtFBGdNB2uWGlYHXjiqnPuq$6AdxKaIz7JeNnYCYdFl9yFBp0Suy9L5GINwNXtQWGGuU4PoNRsK6NNf2B4zKg5uQ$z7Ub426ngv6ZqW2tUYKy5yW6dtC5H+jbETUd-+GL1CGz07GGOs6lKGGU7q9ce0sdvan7tskGVG9NUkr4zsGIO2eg7Mbrlpn-99zeWsOYNmp2se9M2kFdsGGB+H15S6sJiCbGsiH1ghBGy6u1s89LeTJHLRl5Ouv9NGaGNfyVSM-e9v5IFxtNhB7o7GXfJSOkWAdUuu2XIzcPPtFuXI9GkprDGQwp7tsiGGGh5tGtBt9gGGDGNESuC-wGgfS7zsG4sEoARzvNvYwE7BvuhikGING6HPBoV-uwspOunzl6S2xft5INbQB8PL6AOdFlOzyPTCvlcY-+w7eTGjyRNM-46+-lPbJYfY-79+zcdprlpfGhsq4z89mZlBsUb6p1SP8grUNUoT6RCxFyFGENHGJisUgqunP6NMoFG5fiGdhNmp7uIDcGhGMGzsxhsyQ1y1WGmUtUtsDOV14nffcty6l6IZm6Xnl15GA-q7LsMsdsFov2GgMSGc8jnu7xeT$7luJGjnPyyWTE7WcEsIwGGBUvLTGtuz1SP4nF$1rkwg4ZSr-K9u1R61groGYuID+GUKceBZSNlcY$cO6j25eGGu8V6vGG"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: sgUI2gu5Rana2MR6LEgQ5Q==$dYeXJvrTBHaFPfnVEJa5dw==\r\nset-cookie: cf_clearance=0NfiJgQUCbvnXCQcMCZoe2YfczgKTbjoGChvrgbETMc-1772173026-1.2.1.1-1AlpYN909zv5Jh2AV4qTLwMAQXAcNfcbn28xu2pPOcgxx86qbj4f3nmIMHYXuw5nyhdD3_S3W7hxB3EK3IiK.wCjoSB95FcG07NOuyPjEjrnOFNhHZPa456kLfH2pNYQXT1GV8tA9YGzYjuFgtYKAGnwUZ6MSnlNh8dyAzHl96YNUgIrJJ1B9oJjFqMMyEt5NAikwGryhOn573o0lniyb8iW9QQIhlQMU4gRdHSDvhI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=form8765.cfd; Expires=Sat, 27 Feb 2027 06:17:06 GMT\r\ntiming-allow-origin: https://form8765.cfd\r\ndate: Fri, 27 Feb 2026 06:17:06 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d458ea6a9ca32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T05:30:39.453967Z","times_seen":18007422,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"form8765.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/82617109654","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T06:17:05.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form8765.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:23:49 GMT","end":"Sun, 17 May 2026 13:22:21 GMT"},"fingerprint":{"sha1":"4B:95:B4:1A:7A:7E:06:2C:97:7B:D7:EE:7D:85:F7:85:F7:C2:8E:96","sha256":"2A:86:1D:CC:DB:10:3E:F6:FE:EF:79:C1:02:AC:FC:33:F4:39:38:FF:AB:68:7E:25:07:19:79:AC:CA:E9:D4:D0"}}},"request":{"raw":"GET /82617109654 HTTP/1.1\r\nHost: form8765.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: supportToken=cq199met0smm4i29v6; connect.sid=s%3AEmlxZFlySgxGxXXOgGGZGqAqav6svBsw.WEf0Buwm8sFkQm4a0BMtEeRxchWOTL2cTMvImYOEgeU\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 06:17:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 95\r\nx-ratelimit-reset: 1772173066\r\nset-cookie: supportToken=dop7w51obipmm4i2a86; Max-Age=604800; Path=/; Expires=Fri, 06 Mar 2026 06:17:05 GMT; HttpOnly\nconnect.sid=s%3AEmlxZFlySgxGxXXOgGGZGqAqav6svBsw.WEf0Buwm8sFkQm4a0BMtEeRxchWOTL2cTMvImYOEgeU; Path=/; Expires=Fri, 06 Mar 2026 06:17:05 GMT; HttpOnly\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XUbh0ciXvhwq3YkZXHQKg%2FLsGQVpnFFhDyb4XR1%2Fyt5TGh9DLUgKVj9wbB2kX9%2BrI52fHxRknNaRM39kt1JUrybmrFZuxRYgExduQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d458ea1fa4e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15949,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7677)","md5":"7a3bbed185fcde134d07ef93983dd692","sha1":"2244ea532cd305c8bec0f07bc0867fffa38aa684","sha256":"dcb9cf6f817834be07def4bbb1b4d2e39ca8d0ae74c4a4b07cb1bbfd3f4bc3ea","sha512":"98daf9d5adf8d8752c27da5e701c95ca2de7c540d0201f76cc52f6a0a85a0aa07c16cb7c78876583af951fbd5dcd23a99310c1e5eab7d6919ab3f93bf8208e41","ssdeep":"384:3zUe8jCFGwwV6mwhwtERSonmngjWKl5xnx/W:5ECFtmwhw+8hgjWKNx/W","tlshash":"e762933cb55502366d63c1eae2a8f50cb425e0c3ee2ac598f58d44016fd7fe56cd2b84","first_seen":"2026-02-27T06:17:29.566306Z","last_seen":"2026-02-27T06:17:29.566306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"form8765.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/favicon.ico","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://form8765.cfd/82617109654","date":"2026-02-27T06:17:06.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form8765.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:23:49 GMT","end":"Sun, 17 May 2026 13:22:21 GMT"},"fingerprint":{"sha1":"4B:95:B4:1A:7A:7E:06:2C:97:7B:D7:EE:7D:85:F7:85:F7:C2:8E:96","sha256":"2A:86:1D:CC:DB:10:3E:F6:FE:EF:79:C1:02:AC:FC:33:F4:39:38:FF:AB:68:7E:25:07:19:79:AC:CA:E9:D4:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: form8765.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: supportToken=dop7w51obipmm4i2a86; connect.sid=s%3AEmlxZFlySgxGxXXOgGGZGqAqav6svBsw.WEf0Buwm8sFkQm4a0BMtEeRxchWOTL2cTMvImYOEgeU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 06:17:07 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BeGfBGjI7fUGMNrnXsp%2FD6TAJYoMGcRG6ZbSg6JeTWSQTmJoaK4cq%2BwPNYGpMa1yuESMm%2FpqrBU%2FzUv2bLunPlF0TEntSQz2rLUkYA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 94\r\nx-ratelimit-reset: 1772173066\r\netag: W/\"9-0gXL1ngzMqISxa6S1zx3F4wtLyg\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d458ea609a532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-21T04:40:47.730349Z","times_seen":89478,"resource_available":true,"data":null}},"time_used":1174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"form8765.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"form8765.cfd/cdn-cgi/challenge-platform/h/b/scripts/jsd/7f3d2ee44814/main.js?","fqdn":"form8765.cfd","domain":"form8765.cfd","tld":"cfd"},"ip":{"addr":"172.67.211.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form8765.cfd/82617109654","date":"2026-02-27T06:17:06.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form8765.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 12:23:49 GMT","end":"Sun, 17 May 2026 13:22:21 GMT"},"fingerprint":{"sha1":"4B:95:B4:1A:7A:7E:06:2C:97:7B:D7:EE:7D:85:F7:85:F7:C2:8E:96","sha256":"2A:86:1D:CC:DB:10:3E:F6:FE:EF:79:C1:02:AC:FC:33:F4:39:38:FF:AB:68:7E:25:07:19:79:AC:CA:E9:D4:D0"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/7f3d2ee44814/main.js? HTTP/1.1\r\nHost: form8765.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: supportToken=dop7w51obipmm4i2a86; connect.sid=s%3AEmlxZFlySgxGxXXOgGGZGqAqav6svBsw.WEf0Buwm8sFkQm4a0BMtEeRxchWOTL2cTMvImYOEgeU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Fri, 27 Feb 2026 06:17:06 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d458ea619aa32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27843,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (27843), with no line terminators","md5":"73867454ee7a26ecaf1bc36c4f4fff43","sha1":"6b3d780bef66b75d7c1050a1e299d7ccfaede1fe","sha256":"b7ab2181382c8fda9eeb5dd3da076392ca0e29b983d0907f541644bebb045049","sha512":"a5273307ee543829b25a65ec687e842cdf54d5163d6d405917543e879c2ac8637e7b7056fae6be29388435df2193165d910364c88060587583775e96165244e4","ssdeep":"384:nppW/ChqL9579PJ0T4TpBjwv4JIuoyOAimL5uMxzbsDZ5ghRmPMJPxP/EZaGVZYC:p8wqL9B1i02zqKmts81btKHnt","tlshash":"3fc2d68d7ee7341853267ab530bfa44ae32efcc93895ca8a8500d2f07ce1349855addc","first_seen":"2026-02-27T05:53:24.656581Z","last_seen":"2026-02-27T06:17:29.568124Z","times_seen":4,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"form8765.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}