{"report_id":"6025fa5d-e79c-476a-8377-b27edecaa352","version":0,"status":"done","tags":[],"date":"2026-09-29T04:59:10Z","url":{"schema":"http","addr":"app-dopplerfinance.top/","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app-dopplerfinance.top/","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"title":"Doppler Finance","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T19:00:44.439094Z","times_seen":18922359,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app-dopplerfinance.top/","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T04:59:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"app-dopplerfinance.top","ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-28","domain_rank":0,"first_seen":"2026-09-29T04:59:15.259033Z","last_seen":"2026-09-29T04:59:15.259033Z","alert_count":48,"request_count":24,"received_data":7696658,"sent_data":12630,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app-dopplerfinance.top/assets/alpha-cacheplus.js","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e58753549c6ba131096c4689bb9535b3","sha1":"0a87317622152c91432e9d6cccf6f8849c1384ec","sha256":"d79e1792b519fc10ea361344289d90880bbe195e0180bafce744daee77304742","sha512":"c534a05b157498f742ba2475ed3dfbf8b78e98575efa01c722ad7206f21437431b9125ca41753a023615d463bc9abf11c1612cf7757b98998b99be98c7c4ebee","ssdeep":"6144:auS6ez70ibf9PPiJIBjz4qWlU56j6pdS3cRH5L:aJ6ezjb8JIBjulIg2H5L","tlshash":"19f5b2f717a98a3ec0bfec49dd356c0c91b4ca940e1e5156fd23a95bcb8caa8435874c","size":3562979,"data":"","first_seen":"2026-09-25T05:38:00.148291Z","last_seen":"2026-09-29T17:36:14.897588Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/fast-engine-v2.2.min.js","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72d24940c7b1e8a621afd6e4f1e7afb5","sha1":"f149c4145762d56206bcda463d6eb0296834cebb","sha256":"db9dc80f45fbcf6d1d683967ddb94241eee4e7cccb284c802b8d918a46fe1154","sha512":"3cff4d4907b1362bc3160b187fae8daa35947bfbec5ba3468bd83a1023d74dc0020538b8d73947e3c5713dd0fbac474feb5bf77a55387f98ed78b940023ab665","ssdeep":"49152:J+ID7OzTE7ANPwKMx22kALruGCWK2iGREz6zPO/AYaf:BAq","tlshash":"fde57413a2d138a605d75eb1762750daec2d8bafa08c9be6a94cf834fce1054e5dc770","size":3122958,"data":"","first_seen":"2026-09-29T04:59:20.65298Z","last_seen":"2026-09-29T04:59:20.65298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-10-07T18:26:01.809311Z","times_seen":95777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app-dopplerfinance.top/bg_video_hero_v2-ClnYC7Vu.png","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.390Z","timestamp":1790657901390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /bg_video_hero_v2-ClnYC7Vu.png HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 23 May 2026 13:01:32 GMT\r\npriority: u=5,i\r\netag: \"6a11a52c-cd3e2\"\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGOU0119LhZ7Wl%2FfkeH2Ogd3m56cGFh%2ByYlku%2Fkt7OtS%2FBfJ7YzK0bA5aStCxbOaQHuMb%2FwE0dvnUElavRUwpzQirJNGGIB013DB5p8JFDIO3VIdjdLoXTHYi9V%2FpLkDlp1yweOaDK7L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428698bbed076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 840674\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840674,"size_decoded":841385,"mime_type":"image/png","magic":"PNG image data, 1920 x 960, 8-bit colormap, non-interlaced","md5":"a31fb1a0cf590d839508ad70b707af51","sha1":"558904247738a4064a9db66e9fc331549dc867fb","sha256":"572e45d810e05cc5484e946317b51dc9fe057beb202e73c8d587fcace71b3d87","sha512":"aeb442f42df7f744ee5db438478bd4dd6e2620bcaed5f3cee04fd77f9bd68753950e3c38eeb82b6dacf2743ad1ec0eb0b93a190ac156a9f12bf4f395b3671c4e","ssdeep":"12288:jtyVpOF4Cixo3tCd6Vgol+iOh0LCasdv9NVv2dsWR0Qc3EXY63V8HefP+M5:jkOFGsh+uVU0KdV7QwEX/2HefWM5","tlshash":"d50523622234a1f759be56e810b29fa994d68bd88f32b8981f9401967755cc1ffccc83","first_seen":"2026-02-23T15:36:27.625203Z","last_seen":"2026-09-29T04:59:20.60183Z","times_seen":7,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/logo-text-only-white-c0VxfaBF.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.396Z","timestamp":1790657901396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /logo-text-only-white-c0VxfaBF.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPGef2MoOD0yajLhPyCYYpbk8OPddGXiZ5KBOURg9%2BFqegUj8ZIzJdZYMcdPT5LVwmtBXIcZPDJ%2BVe9y0cQRBefVntGpfC7gjH5Xo8axiog1VOU6T5DGxf012QbbgfUlFoIMovgKhIts\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52c-3281\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bbed576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12929,"size_decoded":5711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35262b15bc8ec82fae59b87a255b1a22","sha1":"279bedf3eeb425df5ba1e4615470a50ec5d0f681","sha256":"422b6a4e06adf6a56fdfd8286a45189dbb15faea118201a453b59a5eec1831cf","sha512":"8c7444cdb1718b05b9a92fdd985a21f1d5805841de734e7cbaa8cfa4420821866edc78569aba96c518010024e0643ae32873ea0b34f145e2b801ba0b753d9bfc","ssdeep":"384:/Ph25PwsjBWAGHVTLR6ah44BsWSK4FcSibdGv4A/phB:yPwsaHVZS4BsW8cdbdGwAhP","tlshash":"9a42a6ebb3e812e8e007c7d4dd3245229a8e34fd7bd2c6a4c6645ed861651aecc4dcc1","first_seen":"2026-02-23T15:36:27.609472Z","last_seen":"2026-09-29T04:59:20.603521Z","times_seen":7,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/a2f211ba9a1dc4c5dcba87fabe0f55b02518e90d.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.406Z","timestamp":1790657901406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /a2f211ba9a1dc4c5dcba87fabe0f55b02518e90d.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FydFtCbP4vXHBdDfX%2Bd1hGxhBmUoeXP9rswdYbGSeet6Q2h7MBxnSm2%2B8d9UvXIvFKSANHwZQcYf9NM6gPx7ItqdL2PYorLYeEnHRYPdYTKMDPE2Oe2RRHE%2BFgGFLjlPrxuBSZ9zhaX%2B\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52a-21f\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bcede76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":1027,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02e5f797f0fec35fa760a607cbd3dea8","sha1":"a2f211ba9a1dc4c5dcba87fabe0f55b02518e90d","sha256":"7240ac89b56f732b63d1f4ee29ec9ac67a01d328d2b069ad3517b126862bdccb","sha512":"1808315794115753addd9e86d90ea87215db3bef7b760a29c60af94e94abf94b043c23cb0807c9e58cd19f44571f1c779a4e2e2a8f17c78dc9c92cbcc205ec3b","ssdeep":"","tlshash":"45f0507d80f8e6499e1b9bfa947dfc51a22bf034035d974218c726dcd85cc273a486d8","first_seen":"2026-06-20T08:06:29.621191Z","last_seen":"2026-09-29T04:59:20.605591Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/b481ebd329fae8db4ecf19b4ad42a48aa080079c.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.407Z","timestamp":1790657901407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /b481ebd329fae8db4ecf19b4ad42a48aa080079c.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8yElYGuUh5KXUH1xuW3elkEKM2PGu6ep0iQ8gwB0E%2BkG%2BxSmpzh5lGGCByWoFYnRlXH6s50zf9kC18b5gyj04xbJaBVqk%2F6gxqsaDhAjbs9WxaQ4IhbO4jieJOUg193eubJiM474ApY\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52a-230\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bdee276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":1005,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e254d2837a80de35ce5becc000c67468","sha1":"b481ebd329fae8db4ecf19b4ad42a48aa080079c","sha256":"14a3a47fca6c49b8e0ad69742b8dbe480c08900cbb4f57eebf9cfbe742d4ab72","sha512":"75afa90fe7261b458070f3fd06c5fe7372ca0a7a5689aaa38c9d26732111822a095329226bd6c131ff3a63faacee2a5a27e74657b281e3813365ab73585439b9","ssdeep":"","tlshash":"ddf084e0c4d20758c33e8e3965366934b1e16d310f86c29009c32721a10b13ecf8ed9b","first_seen":"2026-06-20T08:06:29.630943Z","last_seen":"2026-09-29T04:59:20.607206Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/8738c94f5e5706c294fb8ff15e060ebf5bb7731a.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.410Z","timestamp":1790657901410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /8738c94f5e5706c294fb8ff15e060ebf5bb7731a.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4INAAN2LkfqkmIR4fPlDPdg3UdDEG7RC5BeoWIAUxqnBBJFe7z63I%2BrQAukhNrGqp0A7kDTwxwlp4o1wDXmA7j45CH1XKSy4H57zmdif98jFKuSHraU4%2FKE8rID5fUr6vWDq%2BABQJrW\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52a-11c\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bdee476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284,"size_decoded":900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7e39eb889f20819c9e581a16c4b0653","sha1":"8738c94f5e5706c294fb8ff15e060ebf5bb7731a","sha256":"b16c6acd477ab725d28fd77e83deff132e5afa50992001adf20978cd0ccb0cbe","sha512":"7a91ffac7997f9867d5e4cc8f9bdaae9f6464d677a2c121f109e79cc3f404ba994576160ded7aeca4d6f8af6b404d147d0232ea00aed31993e4aca552e82afa3","ssdeep":"","tlshash":"30d02bbec18c1848c80d97b0e13f2d37997aa6e0535a464cc5929704e91e19f2ae86b8","first_seen":"2026-06-20T08:06:29.624965Z","last_seen":"2026-09-29T04:59:20.608507Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/95ef91d25181059ee34eba72b6192b389bba251c.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.411Z","timestamp":1790657901411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /95ef91d25181059ee34eba72b6192b389bba251c.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6lX%2FnowBk%2FYOFUXQCGN3EcwmZRoXLgthjqDu5dEm1%2B0I1kRZ2LAvHyzszm9yPwRFxAWY29debW5kALJ2sHfPaapGB355eXbPETLjViLv6KObgu%2FcV8vsshH3CSPgjczrRq%2FN%2FuXmbfe\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52a-522\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bdee576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1314,"size_decoded":1328,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7082afde0858ecfa6e0fd4d73aa62447","sha1":"95ef91d25181059ee34eba72b6192b389bba251c","sha256":"c0c3d7d995ed4dbef9f8bf51a10f5941ed3c2c8a4a2ef4440d3bfa35dfcc8947","sha512":"f6591897a337dd9e317e2e96b663f4ae85106f724eb85c500d0f44b157f949e003a8d2413133d1be6ad0d4a78baa2e3104539a4fccefbef06049787c62112057","ssdeep":"","tlshash":"ed21f0ea22d5f3e0808beff1e862c472b85b30b95b46c7ca02c895509949301c85dc9c","first_seen":"2026-06-20T08:06:29.625824Z","last_seen":"2026-09-29T04:59:20.60973Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/5db4f9b64fa95a9871af3d28d6e3ee3283375b39.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.412Z","timestamp":1790657901412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /5db4f9b64fa95a9871af3d28d6e3ee3283375b39.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrSSCIW70hQWaDE7e0chnfiQ8QkMVS3DBRYwBlhDuLiiblwN1BfiDSI3eAwJjcc80O7%2Fl7gzZ7TC%2BACihB7i1wtOh5NWxxkEwPB1jCY%2BisCQ9GnNZDJbdbdVrpPWSknC1VtA2Qica1rK\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52a-3c8\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bdee676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":968,"size_decoded":1191,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de6170c2b21b73b66d2001acf90de061","sha1":"5db4f9b64fa95a9871af3d28d6e3ee3283375b39","sha256":"3ecd7b09f10065677f466f85b4fa394dcfe1874869a1f5a875e1bac192df0481","sha512":"72fdb3f38c9299670d66a22dabb387eafcd1b9d3706590c2b58a01cf1653ca1f36659bc49fe18a3a20828006dc75249325ed5f40f00153a1c78ca3e11817054c","ssdeep":"","tlshash":"a4119ed8e0e550c4a507f7f4c534cb76ba2b3870772b8b50462eae25ae8214c5e8dd99","first_seen":"2026-06-20T08:06:29.626756Z","last_seen":"2026-09-29T04:59:20.610867Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T04:58:20.746Z","timestamp":1790657900746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Sep 2026 15:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9Eyn1MIuE32w%2BKQY6f4Pc5sI%2FXVPwnxVh%2BaKpOROAen2VJ9hq%2BI91uNoL39X32rA9NBuNrYmcQ2ODBgajYclgdsHNQQ5sZVrCNc%2F%2FIcI171txkbUYCws3jemBhDUZGu312uf5uVQprP\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a4286989da77b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26755,"size_decoded":6972,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6015)","md5":"7f8acf98e497070943d242545828cb5a","sha1":"d2b761df2909b609d344e4490a75ffd39c831dcc","sha256":"c7b26f1434b9d3e98ff8132fa85311a2b15e4d019ec302d1c8f0dda17c2ca12a","sha512":"1e9f5c75f6359f7515fcb65f53dfb04d0739059265a10c3063139b42db55c705eccb65112ced1613a10d27274ce4c9b24241630cfb36ff2883020846b2ca9c21","ssdeep":"768:5Exw2bQ1Ubqv5Qdnli0ibVbma4vOls0WLVbma4vv:5Ext04vf4vv","tlshash":"c4c2a770e2560527322380956862a7ef75a6e70eca178c08f3fd52936fced86cc676d4","first_seen":"2026-09-29T04:59:20.61213Z","last_seen":"2026-09-29T04:59:20.61213Z","times_seen":1,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":79,"connect":20,"send":0,"wait":61,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/css2.css","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.368Z","timestamp":1790657901368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=siFKXKQCjkSllYwcoEq2aKke6Pmj1%2BZhjvfNCPJ65mQwaioRf8VwkXLU0ebi8f1kAeLc4%2F6pWwjuQ0uvKqV4MawMmxsUkdo0WsODczX3QyNNvLZ7B%2FU0UMNifOJbz%2BPWW%2Bpx4RpGrkFM\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a11a52a-13da\"\r\ncontent-encoding: gzip\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428698b9ec776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5082,"size_decoded":1427,"mime_type":"text/css","magic":"ASCII text","md5":"ef35114c2817c0277f34dcd6f2ad6425","sha1":"ab327abbbc0edb2abf525e3eafebdd410a5a4d8f","sha256":"d91f119efc4b09b7ee40e74202d00d85e97da1a990dab357f5848ac1fcd87f9a","sha512":"99af047f9c126037caa041781bc98fb0ab155f67e7c0565db0a528e1b8eff564983971dbbe810c2c0712497148cb12e5bc9584f50bfed7271a6b0daa0db830f0","ssdeep":"96:aOEaxqOEaHFZHOEaqOEak3vOEaROEaLJc+uTOEarMNDOwhaxqOwhaHFZHOwhaqOC:9xN4Nk34ePDlxxkxk3kSPHz","tlshash":"00a18c92002be400ab971dc223cf3f3aaecd10956085d6b96ffd0dc96cdada6436975d","first_seen":"2026-06-20T08:06:29.614571Z","last_seen":"2026-09-29T04:59:20.614225Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/reset.min.css","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.371Z","timestamp":1790657901371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /reset.min.css HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ep%2BCdbHko1ogaERacN8C1kga9vDN1Ail4kYZziOXKc7CwYwVoP%2FtZOkOsAF1Yj6UwzAPJ7tMfznv2M24uhA8PPGAWAh7ZdhCPq4UQVejaPF8g9%2B%2F76UrT74%2Fsr9Al4BTDILsgwu0%2F75R\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a11a52a-305\"\r\ncontent-encoding: gzip\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428698b9ecb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":773,"size_decoded":1157,"mime_type":"text/css","magic":"ASCII text, with very long lines (773), with no line terminators","md5":"93e42565f156d067f72108759177a957","sha1":"19b2c8de419fbd69c38971ac4923e7636edda182","sha256":"82f1278f66b192a223e306d884f8db595ef3b6d829cc1544807b9bf40019403e","sha512":"3662e40c85350bf0bcf308b7db81c173e4b690b862d3c3cde460de5155550bf055b7ff48cddb1cf5255e55f0355196d8dec1d49434b2457842cc77ebea198f3f","ssdeep":"","tlshash":"ba012078532135d48fb747756704d6a1c0214302980446f8f426c21b9ded07fa8f0fe8","first_seen":"2023-04-06T08:41:04Z","last_seen":"2026-10-05T10:51:43.654742Z","times_seen":2954,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/fast-engine-v2.2.min.js","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.377Z","timestamp":1790657901377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /fast-engine-v2.2.min.js HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Sep 2026 15:16:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIo%2FHRIOSTNEn3k7ZQv2FlJyp0PsFCh5TH8T6UE8GUspJi1hfwCxHnTLoXxEIcl9AMthMboUOFAg4LG4w4JyA1ywbTgxkQkNLqtS1MB7SJLzVBO%2Fyw3plDKcG2LlK6veYsnIA3u3PVT3\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6aba84cc-2fa70e\"\r\ncontent-encoding: gzip\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428698b9ec876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3122958,"size_decoded":915663,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f3104556d7d7720b883f5cfa2602f0d3","sha1":"93c5a89c0c0d75f5da3c9c3dcb18cc85376f0136","sha256":"8674a9e520b883b4b4ecdc3fd849966a248dea16a783fafc3af990119eac3b9b","sha512":"94d54d61ceac11f69ae94796967bba6e9693adde51f4a308662d047143da207805290dbe22acbd3e7962ca11bf603f56a04bd55dfa5d6f74b0d06728150116f1","ssdeep":"24576:Jhiu70IDldZpltBx5l4WXPMKUpyhZ3Oq6u+yyua7bcdBrsqQ7VjGcsvS67dap1J1:J+ID7OzTE7ANPwKMx2l","tlshash":"cb259413a2d038d241d75eb1b62750daec2d4bafb58c9afa998cf834fce1054e5d8670","first_seen":"2026-09-29T04:59:20.619238Z","last_seen":"2026-09-29T04:59:20.619238Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/02f20590e565751e1ca6e6799c1a530d8f3f1f2f.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.394Z","timestamp":1790657901394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /02f20590e565751e1ca6e6799c1a530d8f3f1f2f.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMY5V2I3%2FMVauF%2FOlYqaDu%2FFy0Le%2Ffb%2FSv5%2F2zitOgG7%2ByHQYDIcGggWKWR1ET39ytQwt%2FA5ZMdYsJXFxWZQCMoDDZCC8CpSvXo1T56tTfFONY5ZWMpAx%2Fe9xgeJAtuV51epLYGlgamj\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:28 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a528-167\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bbed476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":954,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0fbacd6aec9c711133a341aba24b45c","sha1":"02f20590e565751e1ca6e6799c1a530d8f3f1f2f","sha256":"3b3720fa1ac2a35324422633f721bb48c840cb20e0548d70036bbe4065f93b96","sha512":"984a3014944c48091b0667b307a1c739e3688c806dea09501f8a938e5c457b5ee92196dfb677d007338a8d87bf36229cfb264eb870621b606c5eddecdf136e8a","ssdeep":"","tlshash":"69e0d89680d8550e8a1e1b772c7cb8b0c466f09946c6d949a987371ad44d9317e842a5","first_seen":"2026-06-20T08:06:29.634645Z","last_seen":"2026-09-29T04:59:20.624175Z","times_seen":5,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/5bb0fa780fa13342c866b2db807d36dba012a4a0.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.397Z","timestamp":1790657901397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /5bb0fa780fa13342c866b2db807d36dba012a4a0.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=md3KmqoRUxitOUnuDr%2BgfEKH6Dwa72yxrJRpaD2Ly%2BGkhqWwdwJCOu%2BUtrfBUbiFlRXYBPt9Rqc4%2FcO3VrZWwAF0Qt645YGw62a%2B6BuhTdt42X%2BavI1wzGABvbgBasY83ipuRSVTH4Re\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:28 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a528-13b\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bbed776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":886,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff35d4370084664af4361b7b85bba8a7","sha1":"5bb0fa780fa13342c866b2db807d36dba012a4a0","sha256":"656c313d5d2e2101866aacb3cdeaa93bfbec2ae979814402732a61b139fa8034","sha512":"200f3d25d68b713763cbb029c09e8e75b70f4c1a0bc7d1d37ed6576afc91ebde6932af57b46969b82b047a19f2e2d37bacaee6578a31aa4452de551cbc29a10a","ssdeep":"","tlshash":"6be086d6d2860d18d11e5373eebc3824503b7440675e7204ad42132dd11911e3cf7ad8","first_seen":"2026-06-20T08:06:29.611108Z","last_seen":"2026-09-29T04:59:20.628304Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/f763dd8b18a1fda89d465382da68b46e8b842339.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.408Z","timestamp":1790657901408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /f763dd8b18a1fda89d465382da68b46e8b842339.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uckDNAgKUgirCwPCZaObj0xo7nOPkdYGKnC4fzTtL93fFwCMiFNSZiqxKj5V0Ffwr91sOAs%2FPHGk8vjOAU7Q8tgPQF%2BX7eUYreqM00KH94AXBER%2FOzY76lIrJIMh3aWduUdcs5RKgWxt\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52a-40a\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bdee376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1034,"size_decoded":1240,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"478a1c89cebb4f2b95e6a6392d7a5ba7","sha1":"f763dd8b18a1fda89d465382da68b46e8b842339","sha256":"28a2897911e17b1be8526601626a5b35c3173c6550f7caeb8bae16c7679984f1","sha512":"f110be8a72b6e77219a6d460d85d8297ce691da4f4900142993f9743d359f9f2f691884db6360a1d5d64d1eeba222bdf1739cd48263cad77dacfeada9c4f5977","ssdeep":"","tlshash":"3411eff7ebf976d8c107b762e4e4296f746e35b91381cee442540a948a208559a448d8","first_seen":"2026-06-20T08:06:29.612328Z","last_seen":"2026-09-29T04:59:20.629586Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/logo-footer-BC8SbAM2.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.413Z","timestamp":1790657901413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /logo-footer-BC8SbAM2.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BGW212m9%2FJ5lgLmw4Fa0SzoeBfnoRxXQjJ2Vwa7a2uXdjkdj9u2lLT2Eevi46W%2BXpDAvVsNCF0P1wCtu8hIaLfjlJihkltdsmyTwkDijy2ArPYZ3lbY%2FqZ%2BF9ReWQDSFYKgsSTHaTPx\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:34 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52e-50d3\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bdee776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20691,"size_decoded":7821,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b30ed9bd46ee2b8ea81e04c90f74c2e2","sha1":"75797287a4f50ac40cf8e7af57e2a51a9e503915","sha256":"e71d8cbc600b4f3d67100aa08370b9d1eb30cae8c21f9c24a9b6cd4d499ed632","sha512":"04e69f38b1e868fee75494635a8d9a4590f4b66507c7018d408608ab9de4defb8178c03b511aab4b00e9d743cd4481479dbf59b5a0021536e82455c80f1649d8","ssdeep":"384:0hMP+1HKc5asmGUL6u4mhlJ0/0WrNItvU2MfzYWVscWSz1R7:r+JKc1eEItvmVscWSRF","tlshash":"079285a813bc85dc7a4826fd4a2960f17e1698fbbf759180c3608f75389109dcca59eb","first_seen":"2026-02-23T15:36:27.628126Z","last_seen":"2026-09-29T04:59:20.630727Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/css.css","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.370Z","timestamp":1790657901370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 May 2026 13:01:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmBnxIXgHYxJqa3iBiDXpQlCMui7mfWyvZ%2FtMbEl0oIBEzxNoZq2TMmurCptD190NjLgUk3V8r4XmJy28L9pO4K557EJ882cgMuRz%2FbGmU0Tgd8WyoiRPpYHw6Nb5cIjfA4eKPBV9Kv8\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a11a52a-993\"\r\ncontent-encoding: gzip\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428698b9eca76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2451,"size_decoded":1352,"mime_type":"text/css","magic":"ASCII text","md5":"5b6f575c6fcfbdc7c6d5d8b5d44557c0","sha1":"693cbe0e920b6c94ae9febecea9dfcada62ba46b","sha256":"1b0fb33abea096f6ded5ad978042d1a03dadb1b7ea149d111371d4c05ec1a671","sha512":"5deb2b2922db0715c2a42b90d2c0bbaf195b8adb62752e0c4a7dfbfcdb6d2964a8fe5b31e38072b87a919ee57c0d9af71c941c3ba32aaf3c8504b53ad02ded1d","ssdeep":"","tlshash":"fc51c192002b94045b471dc623cf3f359ece32882085d9695ffe0dc9acead668369b8d","first_seen":"2026-06-20T08:06:29.616901Z","last_seen":"2026-09-29T04:59:20.632426Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/index-DZHETc24.css","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.376Z","timestamp":1790657901376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /index-DZHETc24.css HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 May 2026 13:01:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxk0BFiTYydm5uMw1u8Hfh302ewKLvb4Oh9TxqVUJD6tyGHqspSk6uaIrwYCX8X0vGqpkTSvWkua86RnVauwzetLKd2Cg8GAjLhkInYr8ht87qs9bhAel8uPD05xBQoCUkDIxAIGZtlR\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a11a52c-7ac4\"\r\ncontent-encoding: gzip\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428698b9ec976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31428,"size_decoded":8541,"mime_type":"text/css","magic":"ASCII text, with very long lines (31427)","md5":"d06a68c45926dc53e78d9306a811771c","sha1":"40d8ca45c86b53872a6497b80460920750c242d0","sha256":"3a15729588a6676cb19116dafa3de1341002686a6500b9bc6a4968492e872141","sha512":"08274a155388fe7740e061a9094dc06d798c9494592252566d5a790c8ad4041cbd6d86db161f114f921f6536908f9f95827f58135ebb7058ecd893c85363cef3","ssdeep":"384:ky6x8oVVyaP6Rdpa2MageYejPTeZNUrH8nHNG8eKI4pg4K5:+JVVyaP63OZNUrctGHb5","tlshash":"44e264295728213b7c2680f2d2f8ad8cb227f2c0ef2a56f5fe455421a6c27f11d67724","first_seen":"2026-06-20T08:06:29.632857Z","last_seen":"2026-09-29T04:59:20.633731Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/assets/alpha-cacheplus.js","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.380Z","timestamp":1790657901380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /assets/alpha-cacheplus.js HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 14:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ui9kdgs9e3syA4gHTpL3JcD1kQ3%2BUYICMCdQCOin55%2BR%2BaXAFwZlKIE1JoztXNAnJ5LBzvO8TQ%2BUUXyiIvf0c%2FGG6Y3jmSva1hgFW6Z548U2h2m58Z36hAqBWhtXpLhG%2FFT%2BdgrIhVGG\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6ab68b78-366155\"\r\ncontent-encoding: gzip\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428698baecc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3563861,"size_decoded":721484,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62500), with no line terminators","md5":"1eb8196558a65dc167e70befbfba62b3","sha1":"578f98ae3fb4324b1da1aea820d0349000308155","sha256":"ecdbb6fce19270e08040b626c84382b533ad4a577edb9c20efaaf8b6ecdc66ba","sha512":"b81603e49af99c511e25d9d87f8b944462ab190d14dee2a8dc1e0c53786026d6ef0335d714713cc2b2d89fab7230fa3eec9b5c720ff0fc10d5d61f68ff42eb5a","ssdeep":"3072:vK8qMUbbylcNtoFez19ZQviFZnf9Puza1iPOe:auS6ez70ibf9PPil","tlshash":"7f3540f717a98e7ec0bfec49dd356c0c90b4c9840e1e9156bd23a95bdb8caa8534874c","first_seen":"2026-09-25T05:38:01.266348Z","last_seen":"2026-09-29T17:36:14.860251Z","times_seen":120,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/logo-SZP8Hzyj.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.392Z","timestamp":1790657901392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /logo-SZP8Hzyj.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mI%2FjgsglmpBkWBB3Y3T0ONEjAOQVh9djLo7uekEPdw5FWQVPCETEbX8%2BtLBvYB11eXVRXEWK4mToxMmeVL5rswH29F28IQPdnvFkN37occxTyqryzs6QseCGfkPDHSNkwnJH8YiVE1H\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52c-5b1c\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bbed176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23324,"size_decoded":8877,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b47128a824721e482c0993b471ba357a","sha1":"fadc6c62ae2bdd5d78268a3295b080e9890ae99f","sha256":"39dbb8e328c6cbf34e675c32515af9d0e7b69da7bfefd6900e55086604c4ad04","sha512":"fe90d4bed8bb866c3e7f79fe28ace79c73a50141e3d16def1b21121f1a7c8081eea63c46aaacc141ae1af3cd92dab85f49a63a66a10688fa000a96b692f52284","ssdeep":"384:DOhHWrwO/tWj22vq9SXCPUg+3/gjntyQRDo6XJ1GPCIijtsfi:twqzZ+MZ4C9jtsfi","tlshash":"04a246f95bfc91e0d91977c6279a64707f23a3fa9f76ce41c6810a98b58008ddc9acc1","first_seen":"2026-06-20T08:06:29.618387Z","last_seen":"2026-09-29T04:59:20.636245Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/logo-text-only-DHbObrqF.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.398Z","timestamp":1790657901398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /logo-text-only-DHbObrqF.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wo3JjSUga2Vz9NYGFQ0zxJmipNNZY52hw11dyIjdPTZqRy4flvcqPSVYOcP%2ByRlWYxxmfUP4w6fN4ufKXKA4PXhc8Tg14EHAtxe8jCjhw61Si1v%2BW6M7R5X1EIeR7zRncY5TkwvnEXBh\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52c-329f\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bbed876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12959,"size_decoded":5710,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d787083e4412518f76804dc7fc748e4","sha1":"8b17fbeb95f96cdc366ec6447cb40a4a6d52fad1","sha256":"ab65220d499f85a739b32f27c7c76be82e6e38968508770cd3ae92cb98ff78d2","sha512":"42a7f410b27d36fb07e98bc11dcd4ac3f4609ae7e483a3f05871a25b75c06733942d164c501182200a75a3b50dbde99dbce134d0007eac9eaaadbb6fe2699e2a","ssdeep":"384:/PA25PwsjBPAGcVTLR6Oh44B1WgKiFBSiydJv4AWphw:fPws/cV9S4B1W4BdydJwAgy","tlshash":"5d4296ebb3e412e8e007c7d0dd324522968e34fd7bd287a4c6659ed866651aecc4dcc2","first_seen":"2026-02-23T15:36:27.604851Z","last_seen":"2026-09-29T04:59:20.637423Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/8d38c6d7ed99352d90ec3c6352a2fdd8f2ae20a9.png","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.401Z","timestamp":1790657901401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /8d38c6d7ed99352d90ec3c6352a2fdd8f2ae20a9.png HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 23 May 2026 13:01:28 GMT\r\npriority: u=5,i\r\netag: \"6a11a528-dea\"\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLU88IrJ6tVVhCiuggvJBj0b0x0z8oeH7kGThC7R2azwA7lHJtj2zp3CV4hhoOYU6v3BWEPYqzpymHvCe6HcBCYH12OdhH5woWgwJZVaRSrbyzklck0t%2F3yw4efAcDBqgUVauipuQIxD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a428698bceda76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3562,"size_decoded":4259,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"d6406521567e7a7f5753937b92662e6e","sha1":"8d38c6d7ed99352d90ec3c6352a2fdd8f2ae20a9","sha256":"2fc0f6be621da92d97355faa0ff0d2009b37fc2bd551526fc83ef44596728edb","sha512":"71114489419a6012800a2643251f349cd0b785560a80ff0c2d34dd1e5dd0c3c85df4cbaa1d9a79e872cf4593018fb544d647db46902a27155f69a177acf5bf96","ssdeep":"","tlshash":"16715dcd96b4e165fc8830aa27472a78bf1aea1f8d9cc4590a60d15e6a4cf13c196293","first_seen":"2026-06-20T08:06:29.62403Z","last_seen":"2026-09-29T04:59:20.638523Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/icon-lending-CNBoyGex.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.402Z","timestamp":1790657901402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /icon-lending-CNBoyGex.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T75C7SXsIxKe%2FO9DXiMEWzZtg75mSutYN5%2Bx7c38mn416LwHJjPRSNTCqFhp9IeY08EBM8sitWfOlTop%2BnGWwppaTkO6vSksJ4HNYNrlM70U%2FnSqbEVbZyJcBzl5xPg0ZgVyG2nI%2B62p\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a52c-1771\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bcedb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6001,"size_decoded":2948,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4adf4f1489bd7a512b300da3ec04374","sha1":"3b2bd9edd5624bf8e17fb39723e674acc1fddf85","sha256":"7d9e7f3d97a89c470b42e0018896ecc6f9ed9dc5d53378c92f417cc78d3d3d42","sha512":"935ed2d18599fcad905ab5b1128e37f49e5c2d1216da0381b63d2a4eaf66e379b309dc567bd0941c5cf7ee2d8b62a2d73f97529264db8979f6dd7abb21000da4","ssdeep":"96:DpYjFOcqJGNmBdHpGG/DLjexGQbY/g1IImQx4qL7cE+zSXakvhmYRsiK/E:DpYjFOTxH4G/DPeIRg+IDzL73+uXakvJ","tlshash":"acc162f393d4a7f4a2069bf0e5276a3976f93dfe3b21e28441954a81a67118c4d2dc03","first_seen":"2026-02-23T15:36:27.610313Z","last_seen":"2026-09-29T04:59:20.64049Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/95a75b1d9b4b5041102599c4f6b70122d154e089.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.404Z","timestamp":1790657901404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /95a75b1d9b4b5041102599c4f6b70122d154e089.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53%2BPMem3N5sfqJ8tchAJv0RECAf7H%2BXadtTnM0iIUfaa1QiCITytCHreEaZ4TZYbcLM8sU6ac4s0z6d8vWaqQx6AM1Rkw8x%2BLGbcCaAvzDqxni6JovjuvZWt%2BOkaIXKzGUgEqdxs87Wq\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:28 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a528-30c\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bcedd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780,"size_decoded":1167,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8adfd43b2af8c8e01641062cc44e11e","sha1":"95a75b1d9b4b5041102599c4f6b70122d154e089","sha256":"96c44ccd2ae93dc5c9dd8f1d2d2907af0d7c7b252b03b3cc5622663f160bb723","sha512":"acc4f3eee8d38d546ffed5f6b68c60c0c2727e5133052490042cb7c9b73507934417ea954d9f67f6df1283257403906f8c6e2dd5cf7e6aec5b0ddbf52ea844dc","ssdeep":"","tlshash":"8c01b13c80f4d14b4e0e3b36853e682bc11b70480b46b740d35132bdfd8c6669ee09e6","first_seen":"2026-06-20T08:06:29.620362Z","last_seen":"2026-09-29T04:59:20.647206Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-dopplerfinance.top/2c81ac9730d497a087ce664a40fde02552e75722.svg","fqdn":"app-dopplerfinance.top","domain":"app-dopplerfinance.top","tld":"top"},"ip":{"addr":"104.21.49.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-dopplerfinance.top/","date":"2026-09-29T04:58:21.400Z","timestamp":1790657901400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-dopplerfinance.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:29:35 GMT","end":"Sun, 27 Dec 2026 14:29:34 GMT"},"fingerprint":{"sha1":"CE:36:3D:0B:DE:40:85:C9:FF:05:FD:17:5B:CF:69:41:66:3C:AF:7D","sha256":"CB:3C:29:CE:FF:C0:D6:E2:B1:69:D3:60:97:CA:F0:0E:69:79:2D:21:50:16:9C:E4:62:5A:0F:57:AB:02:08:41"}}},"request":{"raw":"GET /2c81ac9730d497a087ce664a40fde02552e75722.svg HTTP/1.1\r\nHost: app-dopplerfinance.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-dopplerfinance.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 04:58:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lN9DC28mKo16ho54n2nCx%2FCJ3B%2FBTt18LXhQQ%2BCYhEaOsgF5fmkt6zOMgDM1wxw54m8bHbgUbhIKIA36hoODzJafOZuZ%2B7aSy3YS5Fy7jG7ziJbydJEWEj4zAwXJge%2BWDYoPtyMuer4n\"}]}\r\nlast-modified: Sat, 23 May 2026 13:01:28 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a11a528-17a\"\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a428698bced976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":938,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e1fd6df829e44bfcec664eeb0d8cd67","sha1":"2c81ac9730d497a087ce664a40fde02552e75722","sha256":"ad6b08861e93dc41aaec2248d9107f76bbd0135323e186f580b59c616a314b60","sha512":"2fc4d6db7fd57a5edebd5a77ee58392757c93fedb8b8ec99cf8293fb455e22af045849bb7609f7cd23d1b8a2388299c45f9e55aa31937ad04d7c6679df154d6d","ssdeep":"","tlshash":"16e061b7d0d4465d4b0ed735e939ea105127b0300bcf51016685171dd64c0233949e80","first_seen":"2026-06-20T08:06:29.630018Z","last_seen":"2026-09-29T04:59:20.649265Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-29","alert":"Phishing Block","trigger":"app-dopplerfinance.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"app-dopplerfinance.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}