{"report_id":"627a0c1b-6b05-4b32-82d3-802f724b176b","version":6,"status":"done","tags":[],"date":"2026-02-14T15:20:22Z","url":{"schema":"https","addr":"tinderbuy.click/","fqdn":"tinderbuy.click","domain":"tinderbuy.click","tld":"click"},"ip":{"addr":"172.67.176.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tinderbuy.click/","fqdn":"tinderbuy.click","domain":"tinderbuy.click","tld":"click"},"title":"Tinder-Buy","dom":{"size":6261,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"25ea9e0eafc21cfbd8a6334c8d19e5bb","sha1":"6efdfd0d9655530c02db0f3950de43d4da4eb7f9","sha256":"c018ed51d9a62e6b9d643659eba10bf005378bdc35756f4d7cb9acfc8fba5974","sha512":"5245120d596791f0ff531d3799774f9ffaae21bb55bac48626dc069cab1e8c7722696808cfbbdf2c51662c477d2eebdd0a2ec0d1a371509ad688524709935560","ssdeep":"192:hQqKf9TCkNA6D4+x5gXbosqIxfIILEEf92QjR:hQjIXOk","tlshash":"93d140679a930112763384a07bf36b0f37b5d107d106e935bfdd61989f869d8885670c","dom_hash":"domhash4691818dc7f0e840eec83bed5f5bf270","first_seen":"2026-02-13T13:33:56.879525Z","last_seen":"2026-02-14T15:21:19.518645Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tinderbuy.click/","fqdn":"tinderbuy.click","domain":"tinderbuy.click","tld":"click"},"ip":{"addr":"172.67.176.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T15:20:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"tinderbuy.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"tinderbuy.click","ip":{"addr":"104.21.96.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-02-13T13:33:51.317637Z","last_seen":"2026-02-13T13:33:51.317637Z","alert_count":2,"request_count":2,"received_data":7654,"sent_data":921,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.pinimg.com","ip":{"addr":"151.101.64.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-05-29","domain_rank":5120,"first_seen":"2015-10-15T00:21:29Z","last_seen":"2026-02-11T17:34:06.132812Z","alert_count":0,"request_count":1,"received_data":8496,"sent_data":472,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tinderbuy.click/","fqdn":"tinderbuy.click","domain":"tinderbuy.click","tld":"click"},"ip":{"addr":"104.21.96.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30e509441c7c36bbac45b5aab9f5522e","sha1":"3c63662f53e2f3cf506ca2945b38137ca63927b9","sha256":"c39800031d1760171d049f4d4f6c9cbfcbcecc328b680e994901bfc38df01651","sha512":"92b88f7249b0ef6a71e2c5605f4d83a9332011513794a0fbeeea90eb278f20a346f9d4e8b95105af27545efa60e2c1a4ec49be8c98cf0cafd676eb3d8c8a9a2a","ssdeep":"","tlshash":"74f0dcac2c52b46737fe2534c227aa6b3b670700a4c2d8a88645c4143c98a860c52ece","size":467,"data":"","first_seen":"2026-02-13T13:33:56.883642Z","last_seen":"2026-02-14T15:21:19.521148Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tinderbuy.click/","fqdn":"tinderbuy.click","domain":"tinderbuy.click","tld":"click"},"ip":{"addr":"104.21.96.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53bbd05089ae85805ec003b0fbf750cf","sha1":"65be2e17fac0c3d0601eacdbf6034ca8f83b5e26","sha256":"15765dacdfde9b603027f68a43c99f8fded2de4671bd82a8d75bb2f132ae6b3f","sha512":"9018b1c67a0cc979fcec18e4e7c74aacc1bf41dbd12c5d15829038b4c77b637da8c783d2a84d007f219d36be20e522c84009db9e97d7682cebeaebbc7c24e3ca","ssdeep":"","tlshash":"2be0dfaaaad312a182b7313a026fe0193774c0433828fd057e9d41e55fe883844aaf89","size":373,"data":"","first_seen":"2026-02-13T13:33:56.884465Z","last_seen":"2026-02-14T15:21:19.521995Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tinderbuy.click/","fqdn":"tinderbuy.click","domain":"tinderbuy.click","tld":"click"},"ip":{"addr":"104.21.96.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T15:20:00.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tinderbuy.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 14:06:51 GMT","end":"Tue, 21 Apr 2026 15:04:08 GMT"},"fingerprint":{"sha1":"94:FF:F2:2B:82:44:D5:C6:6F:F7:A6:33:72:4C:C3:6F:CB:9C:84:DC","sha256":"7D:D8:14:7D:9C:B9:26:ED:EE:2D:A3:3B:40:8B:2B:A9:08:09:BB:7D:42:31:D5:DD:29:94:F3:C6:4E:61:64:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tinderbuy.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 15:20:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 11:52:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7Q3Y%2FQf%2FACvr4AZ5706aGS9sip4NilQGFzpzZMd54Yv1v%2FDxovoGraFMwmvQ7vZPffX6IVbufjKekPUdlVKUG%2BFc5S9PxIEvuYqx%2BoKMw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdd8c0b4f34370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6282,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"189e3516561ff8f08e8d3b22ef32a48e","sha1":"636ba9149e8536eb3555b154e0c12a35f6348ebe","sha256":"76e99adc9ac241f04cc4ba770eede069827e1da7008a6ba2bea9179b30162b44","sha512":"6deca07fc1a36c78380457b49c3aae713d8be745fa0b2390517d57a4dd5fe73e11698d11855c2360bf0a3ae4cac6f7b95c50edaad289a834150315279e1bd5df","ssdeep":"192:wvMf9TCkNA6D4+x5gXbosqIxfIILEEf9HSHj1:gsIXPSB","tlshash":"b5d16f579a930102b62384b07ff36b0f37b5d107d106e939bfdd61a89f869e8889670c","first_seen":"2026-02-13T13:33:56.880752Z","last_seen":"2026-02-14T15:21:19.519338Z","times_seen":3,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":80,"dns":50,"connect":8,"send":0,"wait":89,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"tinderbuy.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tinderbuy.click/favicon.ico","fqdn":"tinderbuy.click","domain":"tinderbuy.click","tld":"click"},"ip":{"addr":"104.21.96.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tinderbuy.click/","date":"2026-02-14T15:20:00.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tinderbuy.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 14:06:51 GMT","end":"Tue, 21 Apr 2026 15:04:08 GMT"},"fingerprint":{"sha1":"94:FF:F2:2B:82:44:D5:C6:6F:F7:A6:33:72:4C:C3:6F:CB:9C:84:DC","sha256":"7D:D8:14:7D:9C:B9:26:ED:EE:2D:A3:3B:40:8B:2B:A9:08:09:BB:7D:42:31:D5:DD:29:94:F3:C6:4E:61:64:50"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tinderbuy.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tinderbuy.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 15:20:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wv2hKcvs88j0x0ElxJYCFZqZPjDAcQBrCY2LFMY1JCejEdDL230v0kxGs%2BopcFxW36QRsouO5wDFnBdvCBFPjh0c1HejgJpTKMc3k40Fyw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdd8c0d1e54349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8259bd2dc96b69fffb7c7e1f3411275e","sha1":"e945be7ea901f4a7cf170e184711c81bcd3527e6","sha256":"c375e42b6328de1880de1424a93267d573a1afa2ed37f72a35d8218f6880dd58","sha512":"b6c638e4421bf99ca1c8156247c5af6233e696f956f72cfccc88ac1521bc3d9c4ec6d2fc33e9ad78dd7eb95735543d9eea96dd5caa27878b8bc5c6a5a7dcb8c9","ssdeep":"","tlshash":"48c02b2d35137c4cc5a3317432c37080c0da833764ba41128440800331cf2a98ac7397","first_seen":"2025-05-03T23:55:22.499243Z","last_seen":"2026-08-12T12:15:34.439858Z","times_seen":18223,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"tinderbuy.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.pinimg.com/736x/3d/b3/c1/3db3c19b15132b1b8296f5cbc5cf2de2.jpg","fqdn":"i.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"151.101.64.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tinderbuy.click/","date":"2026-02-14T15:20:00.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":"Pinterest, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 28 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:C3:39:11:E3:E4:7E:E1:44:EF:3F:78:CE:33:42:FA:FA:06:6F:5E","sha256":"2E:69:23:2E:93:68:1F:E0:02:95:0F:2D:E7:3C:F4:6C:42:28:05:C1:0E:AB:EB:BD:81:E7:BC:B3:9A:C4:72:78"}}},"request":{"raw":"GET /736x/3d/b3/c1/3db3c19b15132b1b8296f5cbc5cf2de2.jpg HTTP/1.1\r\nHost: i.pinimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tinderbuy.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"c6de3fbb0516eb5628156d04caedb382\"\r\ncontent-type: image/jpeg\r\ncache-control: max-age=31536000, immutable\r\naccept-ranges: bytes\r\nvary: Origin\r\nx-cdn: fastly\r\nalt-svc: h3=\":443\";ma=604800\r\ndate: Sat, 14 Feb 2026 15:20:00 GMT\r\ncontent-length: 8207\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 736x414, components 3","md5":"c6de3fbb0516eb5628156d04caedb382","sha1":"af6f46b3a422529fa1964041c1caf7c245ed8035","sha256":"12ba4da337c918f074e2f78c3a29ac90173aea02de4611ba973350abe897fd29","sha512":"de2547522a4eef045ebdf72b544b4c88b35036b67cd5fabe6b3a9357c7eba0e756ff1456de7e0afe9836757889cbd806eaa7fd9ee23c25a82cfda04131a1ca36","ssdeep":"192:4coaxJMhk3RMxDUYT4Lf+L4ba5RrIK7U2J:4co5hkvW6QhU2J","tlshash":"e9029e013791c417c120cb3a8e750290bb185d2766056f0ff21b1ded466f5fa691a2d8","first_seen":"2026-02-13T13:33:56.882244Z","last_seen":"2026-02-14T15:21:19.520619Z","times_seen":5,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":63,"dns":46,"connect":13,"send":0,"wait":14,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}