{"report_id":"641227b3-c75c-4e85-a27a-3eae0eb96a8d","version":0,"status":"done","tags":[],"date":"2026-06-28T15:32:48Z","url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"title":"marsbahis-tamgiris.icu/","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T15:32:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-tamgiris.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"marsbahis-tamgiris.icu","ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-15","domain_rank":0,"first_seen":"2026-06-28T15:32:50.039172Z","last_seen":"2026-06-28T15:32:50.039172Z","alert_count":7,"request_count":7,"received_data":266171,"sent_data":5718,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":5,"received_data":714558,"sent_data":3596,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T13:30:16.524315Z","times_seen":758887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c4e52939ec7fe878fe304a70e0e7d69f","sha1":"ed8b22fcd2ca58e5d582028658befceb7682e0fe","sha256":"83457dae4954b0f121ef7cc823e55d6aa792fb145c263f27a902cc15e1df8fa3","sha512":"0c121ee597e5fc29bf00994e4a2b5c6aa2031e2dd18fedc185d7364df9fabfa93476c26e24c456e047a88fa451c3b65a72e0d6850c85b52b1ea730777a65efd8","ssdeep":"3:N/BKL1XISwVJ:eL1YSw3","tlshash":"ce5504c0744030714410c400d1501415d517150115dd1413705d44dc37300000455544","size":1337359,"data":"","first_seen":"2026-06-28T15:32:52.852317Z","last_seen":"2026-06-28T15:32:52.852317Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/60d457ef-030f-46a4-b8ce-9c1ffd5bbf4f","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T13:33:38.604013Z","times_seen":6323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T13:40:52.770381Z","times_seen":6557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"54e1b00687c6b3e91d6ed5405ab2c567","sha1":"34995487462bbad60d3147a484fedf00745e36be","sha256":"b329e51b4ca3dd4c3036612e5a11bbe4025d69ef5c3d175fdeb33c5bbbdb7eab","sha512":"c060b7cc4b314aeb0bfb432ac360057f76d721aa920024f3f9eb843d5e17622d758bfaab3a39d1aae76ed4aa94922ac72709ad66d06bcc8ae58d5d54c6ef9501","ssdeep":"","tlshash":"93c0222ef13f4d44a1231420bd3f36a0cc2b718810083e89aa2a08c607624c0a5d1fb1","size":192,"data":"","first_seen":"2026-06-24T10:51:52.218115Z","last_seen":"2026-06-30T13:33:38.623164Z","times_seen":4312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12dbe66295156c1","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dff29a3e5fa0a462aee8b60d2f45425","sha1":"66311b6fd98a6a2ffaf3af3319f03b5b0c792ba1","sha256":"3cdfcc330dd4c20d279945d7cb06ed83be98a68b65e919fba93e63a6578376c9","sha512":"38b5d3cf83f33cdeda95c173744922d9b24c6e191e7f1f899147ee95bebf412d3e9f9433c6f9b51a15b89575ddeaf578a04aa3e1fa8fa3801f9206b14563cf71","ssdeep":"6144:QQavq7tOrolx64J8TTZUaLYdU+fmDDvJ0d+RlvG6YW:l2vKd43J0d6","tlshash":"6024d78e34c1b7670336bab900ab216eff6f68c0940aaf0c841271fb7c5575da57b649","size":220710,"data":"","first_seen":"2026-06-28T15:32:52.84326Z","last_seen":"2026-06-28T15:32:52.84326Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T13:30:16.524315Z","times_seen":758887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71d9c0f9b14595af20ed5864be2557e2","sha1":"ea1708f44d18d5d7c21ce20b874b3a50559cde76","sha256":"84c066230ddb16ae85e53c539a3ec6f862270a0955cc05e0e9b649c125643826","sha512":"d58ead76c25fb650ef5e7b3904bd79d53a470b75e82272061a2ec9358481940a7cbb61efc313c92cc689996fa33f26641aff8a1d52c3bdb6e7ab4682af316ceb","ssdeep":"6144:mpn2T/A8E6+wJOYEPNuZh3N5wK5bXHWR5qadHnj+1aU8:mp6lJtlQ","tlshash":"1234b68d7cc6b71a231db979003b30e9f92b5c94902b4f0dc211b6f37ca139a996a5dd","size":239623,"data":"","first_seen":"2026-06-28T15:32:52.855716Z","last_seen":"2026-06-28T15:32:52.855716Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"965bdf43b0921b3cb46bd741bc4fd5ba","sha1":"0bc6c360e46df0a20afe5724d0a16857f4a9b777","sha256":"1a4e7dc19f1c0c24ef37df7fac2a03e17452637e0a37079b99b344677e4f9ac9","sha512":"17b9ee7afd7c6b56bf7013ada5cf34ce40d354c556d5af4fcae06d45beba4280ac29981cc19c6e00258ffb529fdc68489f241a6710a9c9027ba4fdb0a67692ec","ssdeep":"3:N/BKL1XISx5n:eL1YSv","tlshash":"525504c0744030f14410c400d550141dd5071505155d0407707d0cdc1f30000477554c","size":1337359,"data":"","first_seen":"2026-06-28T15:32:52.857739Z","last_seen":"2026-06-28T15:32:52.857739Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/?__cf_chl_rt_tk=69G0LjH4nQIL_qJVcXUrYv8dMftRBwwcd1b1RfHy1dM-1782660742-1.0.1.1-dQCFpq68u0RyPYKPEPvhWe4RK4In4Q8ZG8pTtKSQbf0","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T13:30:16.524315Z","times_seen":758887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T13:40:52.770381Z","times_seen":6557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T13:37:57.53327Z","times_seen":10295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/dbaefbe3-4f56-485d-925a-d2ebd11028ec","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T13:33:38.604013Z","times_seen":6323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a5f309c43cea412b3c63148d864c18e8","sha1":"bf7f38cb2d94bb746e7a2330f6dc6c5fd71b3b3c","sha256":"b4f6cd7bce38ac77f27c8863ed8cd2f623df0f66826b7bfe3511e8a6990cd772","sha512":"ae93515d590273a66114f0f586f78b165930c87e7219ad70847465be614037da57b9830454bc75b84bedea963f9fd1f5b13d3bef9ade677f6283f5a4a79c3276","ssdeep":"3:N/BKL1XISx3:eL1YS5","tlshash":"ce5504c0744030714410c400d1501415dd07350115dd0403705d0dfd1730001457554c","size":1337359,"data":"","first_seen":"2026-06-28T15:32:52.85926Z","last_seen":"2026-06-28T15:32:52.85926Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj84 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj87 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj88 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj91 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.5657262279530936] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj86 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj89 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj90 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj92 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.5657262279530936] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":106733},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":217734}]},"http":[{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T15:32:22.022Z","timestamp":1782660742022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-tamgiris.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 22:31:30 GMT","end":"Sun, 13 Sep 2026 23:30:04 GMT"},"fingerprint":{"sha1":"2B:CA:36:BD:8E:FB:E1:95:D5:82:2A:16:A7:3E:06:70:74:DF:15:72","sha256":"99:C0:EA:63:68:AF:EF:A1:44:1F:EA:AE:08:B8:5B:D6:06:D4:34:27:35:C2:12:F1:A2:88:AC:80:82:F3:A7:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marsbahis-tamgiris.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 28 Jun 2026 15:32:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-Y2T5pIKxXy0BMKZURO0fAF' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12dbe66295156c1\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBecjQhLRkkhE2wocsY9xyL9PwjwrWTDd0etmL%2Bp7N2eqq00sV7oSEUwgxKvrQtd9Yl09390snSvvySBhv2JP5hC4N%2FGNJDkXN%2B4sc%2FS4dcwKHopnYQWJjcm84r3uDHiEtnjcOKt9QFp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12dbe66295156c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5690,"size_decoded":5632,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5690), with no line terminators","md5":"6ebefe2b9bb078e6c9201dcdfa8168cd","sha1":"2a172f757f8c20d188bd0ec49a335213e6ee6872","sha256":"dfd887febeea9018824233e21305fcfe390911ff7fdc7265f97ed6bc22bfc770","sha512":"3fc82f00ae204a6fc9d4aecee1efc516fa6ed7a6fb922e9803b0d107ba90aaab3d6cabf53d21e212b4de9c21c93292808b13f31deebba3e0c4b9fc19ef809b70","ssdeep":"96:PNywtoXZzIEb0EaW87IU7m4+7iyMfRoIkOLhGzTFyJQpYzueh8kCmw:PN5tkCB7KJ7iyYrHM3GQeyilw","tlshash":"d4c14cb39931402b936e3fd560b6b3bd9312ba09ff057064e075d29cd9c9f5ac128188","first_seen":"2026-06-28T15:32:52.82506Z","last_seen":"2026-06-28T15:32:52.82506Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":63,"connect":1,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-tamgiris.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marsbahis-tamgiris.icu/","date":"2026-06-28T15:32:22.658Z","timestamp":1782660742658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://marsbahis-tamgiris.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 15:32:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://marsbahis-tamgiris.icu\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12dbe69be10b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22108,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T13:37:57.53327Z","times_seen":10295,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/cdn-cgi/challenge-platform/h/b/flow/ov1/1711949151:1782658818:GWcQ3BR3u8XA7KwmWfnouoZXothoOQdnNtJ42ka1vhI/a12dbe66295156c1/hxha6k0hFu77_zM3eANmtYyxukgTQCvDsexC5gl3YtY-1782660742-1.2.1.1-.Fq9M9wFUZN.R1ZaC1wGrBE3tgxFyoU39oL4Nn_YdR.iIgEWrwEuu_hEz5lzZJWC","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://marsbahis-tamgiris.icu/","date":"2026-06-28T15:32:22.674Z","timestamp":1782660742674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-tamgiris.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 22:31:30 GMT","end":"Sun, 13 Sep 2026 23:30:04 GMT"},"fingerprint":{"sha1":"2B:CA:36:BD:8E:FB:E1:95:D5:82:2A:16:A7:3E:06:70:74:DF:15:72","sha256":"99:C0:EA:63:68:AF:EF:A1:44:1F:EA:AE:08:B8:5B:D6:06:D4:34:27:35:C2:12:F1:A2:88:AC:80:82:F3:A7:02"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1711949151:1782658818:GWcQ3BR3u8XA7KwmWfnouoZXothoOQdnNtJ42ka1vhI/a12dbe66295156c1/hxha6k0hFu77_zM3eANmtYyxukgTQCvDsexC5gl3YtY-1782660742-1.2.1.1-.Fq9M9wFUZN.R1ZaC1wGrBE3tgxFyoU39oL4Nn_YdR.iIgEWrwEuu_hEz5lzZJWC HTTP/1.1\r\nHost: marsbahis-tamgiris.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-tamgiris.icu/\r\ncf-chl: hxha6k0hFu77_zM3eANmtYyxukgTQCvDsexC5gl3YtY-1782660742-1.2.1.1-.Fq9M9wFUZN.R1ZaC1wGrBE3tgxFyoU39oL4Nn_YdR.iIgEWrwEuu_hEz5lzZJWC\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2412\r\nOrigin: https://marsbahis-tamgiris.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: b2MbqtYkN4hhKWtVVj2owoMP7eFW9wN5r2h/9YQE9T4=$vvTKBlMH6nD234EpprWAZA==\r\ntiming-allow-origin: https://marsbahis-tamgiris.icu\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 15:32:22 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12dbe69bc59b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19308,"size_decoded":14936,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19308), with no line terminators","md5":"6313bb44911957fc7383415415d4121b","sha1":"f8d0c3094b6674d841d26188b78bea4222848e88","sha256":"ae37ea792c5b1123700bb9dedc17a5450794c1856c0aa52c7d68c25fb30f3b25","sha512":"ef80756dcd01447c88de228bace8d877ba0045b7a0ee9bb7704e94b6e199ed337f253e87a8af8922ba46856b40394165d76b4f53abe113ac5a2b5fbe567d284e","ssdeep":"384:UCB/RqZ58e7ALP4KBcX65lUl7W0QCoxW5GewIocO6G3ZNgup0JT4IMAu:DB5qTX7ADFa8lUl7gWQe3XWZ6PhVMT","tlshash":"4782d05c69dc56df0cd3879523dbdba15e8f2a021216a03a6fa957c140feacc8d2021f","first_seen":"2026-06-28T15:32:52.833034Z","last_seen":"2026-06-28T15:32:52.833034Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-tamgiris.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T15:32:22.837Z","timestamp":1782660742837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 15:32:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12dbe6b08140daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"387c6cbb06bb2cdbbaf395f14623ed94","sha1":"15957244f068f62c839ad15875beb5e566518c98","sha256":"cb9cc7a52b151a08e3963b746023c13f986b746ce77045687bac86c15ffb7154","sha512":"de650a304123a920910822d9d09d0cda4fbb708bc3b295bb9364747a0702981bbe6a65513708905ac7c04dd2ae208eb1d6639c922229ceba867524845ef21abb","ssdeep":"","tlshash":"dda012c57581ad26c5490237c1541220f9301053411201700183dd510522e0682b4902","first_seen":"2026-06-24T12:13:58.81001Z","last_seen":"2026-06-30T12:54:16.995913Z","times_seen":106,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://marsbahis-tamgiris.icu/","date":"2026-06-28T15:32:22.738Z","timestamp":1782660742738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 15:32:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-B74UmOFHD2oV7dRshkr3Xg' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12dbe6a2ce60daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: eypaz12g;dur=257490, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257490,"size_decoded":99920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"afdc113606c6d49409272547acddfa0e","sha1":"9e88d1f7a975076366b56886277c492c8ddcdead","sha256":"61ca7c6807f52faaecabeb32ea0e0c2660d536412104af3a789d123872ec8820","sha512":"91e740e23018eb9ce64afad7cb2f440c742ea21e65540eee8cbe50c948790cff1e963954a384dc8d87fd596b2530e78b0b9a9cf2f50d51f40596f11952164f95","ssdeep":"6144:0pn2T/A8E6+wJOYEPNuZh3N5wK5bXHWR5qadHnj+1aUM:0p6lJtlg","tlshash":"4c44b58d79c2b72a231db879007731e9f92b5c94902b4f0dc211b2f37ca139a996b5dd","first_seen":"2026-06-28T15:32:52.837424Z","last_seen":"2026-06-28T15:32:52.837424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2765374948:1782658820:bajLLtFcCqS41G8Cy8DBFmGlochVYRyhLT25xaPw26g/a12dbe6a2ce60daa/gG5fFmgtRfwQump04oYW3.bykh6evuMLKONzZO3h_vg-1782660742-1.2.1.1-RJHh0rM_IveZui13VYaAtG7mTMlMaR72V2r5DsTwcxaQM36BcBr4cJWgkmOgJbkS","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T15:32:23.104Z","timestamp":1782660743104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2765374948:1782658820:bajLLtFcCqS41G8Cy8DBFmGlochVYRyhLT25xaPw26g/a12dbe6a2ce60daa/gG5fFmgtRfwQump04oYW3.bykh6evuMLKONzZO3h_vg-1782660742-1.2.1.1-RJHh0rM_IveZui13VYaAtG7mTMlMaR72V2r5DsTwcxaQM36BcBr4cJWgkmOgJbkS HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: gG5fFmgtRfwQump04oYW3.bykh6evuMLKONzZO3h_vg-1782660742-1.2.1.1-RJHh0rM_IveZui13VYaAtG7mTMlMaR72V2r5DsTwcxaQM36BcBr4cJWgkmOgJbkS\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4738\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 15:32:23 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$9rwerp91ShOZUH7e3WbqEQ==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12dbe6c6d170daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383832,"size_decoded":288434,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"578426dbb03b29489fed5ada27cb2a00","sha1":"2aa171c15fe1a34b7b4ab0f77a60dea6795b3bef","sha256":"05a3bfe7fa3838dba0980c4237553029c6c58a8968fac973f988e6b72199e52b","sha512":"2d4507c376fea4f7f02869471665dd2bf65c3dd7c1afaba98d150594337e9cf2a1423322d4a0f09d7758464f3e0ec6c034756ab9683146d95c825f5f311e0e53","ssdeep":"6144:wwa53SjbtCTrCBfTtgwhwN3to4uAcMb6cILLriS46/Hdn3fn6n1m1gRVFk:phCi1qwNq3b6duvUhPnORc","tlshash":"e584235964d26c9f8fb4651647a6ec941980efb10832f1d4aeb63ac7940a42f0b3c5ff","first_seen":"2026-06-28T15:32:52.840399Z","last_seen":"2026-06-28T15:32:52.840399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T15:32:28.781Z","timestamp":1782660748781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-tamgiris.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 22:31:30 GMT","end":"Sun, 13 Sep 2026 23:30:04 GMT"},"fingerprint":{"sha1":"2B:CA:36:BD:8E:FB:E1:95:D5:82:2A:16:A7:3E:06:70:74:DF:15:72","sha256":"99:C0:EA:63:68:AF:EF:A1:44:1F:EA:AE:08:B8:5B:D6:06:D4:34:27:35:C2:12:F1:A2:88:AC:80:82:F3:A7:02"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: marsbahis-tamgiris.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-tamgiris.icu/?__cf_chl_tk=69G0LjH4nQIL_qJVcXUrYv8dMftRBwwcd1b1RfHy1dM-1782660742-1.0.1.1-dQCFpq68u0RyPYKPEPvhWe4RK4In4Q8ZG8pTtKSQbf0\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2200\r\nOrigin: https://marsbahis-tamgiris.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=l9JfsPRSo_7DHO2fQJU2AEFbKcl6XFmxSPhaOVopOo4-1782660748-1.2.1.1-gE4IjvMC.vF4b9M1ot0VHZQcu8lrhiAD1fGBRg6WHtlielY4j_6EeOu4VRWd9k8luDSOraXbt2Tz8gCY9pCuEeYMz0cByqXeHpWen3ltCL9u64HtfhtwArueDGlIbVIQFneqUwFiQkW05oDllrOpRgohh7yL7Tqgcjs_DS3409spKj7lySV8odUTdQOK63t3nSD68S_ZpnOrLjKanlHOkPxGY4w9kdNiw3gaPKkHmMguDBuEa9FbI9O5ad5CRYR3vgEAgplBGintuKNkoGGqaj6GbAPfTiI79q7KSCrfSuUFszghVFqDukXzZtiSnpujgSD7Umf5Axn0.vh2KLpp3Hy9IkLIv8znQR2N7zSQ.vhnFYTxBWOZF0rsOVUieWM_g7rPvYXvX5CHVYxCxWC9Zv7s6JAOQ3HX8sPw2oya5aXkkSYnOZVIYuliBJWQuRpQqaEelrwqmRuKrwilDZTmW9caCBVyHF9RLx5SGbqhwybPOBAKWhct0x0UeCUiujwC\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 15:32:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XlNibbdjDHKfprOMvxf6Mn3n6%2FvQNQ%2BKa6Lh91X%2BSWPU8iBG3Pbe0LpNQr5fO4Lr%2B9bZhtCnwTm6Amq3wwvvnpSGKKWURcFd1Khs5CEWJOslqIV2KCqcsZGg0HwsFUhNzG6dhi0DTNRb\"}]}\r\ncf-ray: a12dbe8fee10b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":4160,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T13:32:23.474547Z","times_seen":16859426,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-tamgiris.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12dbe66295156c1","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marsbahis-tamgiris.icu/","date":"2026-06-28T15:32:22.375Z","timestamp":1782660742375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-tamgiris.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 22:31:30 GMT","end":"Sun, 13 Sep 2026 23:30:04 GMT"},"fingerprint":{"sha1":"2B:CA:36:BD:8E:FB:E1:95:D5:82:2A:16:A7:3E:06:70:74:DF:15:72","sha256":"99:C0:EA:63:68:AF:EF:A1:44:1F:EA:AE:08:B8:5B:D6:06:D4:34:27:35:C2:12:F1:A2:88:AC:80:82:F3:A7:02"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12dbe66295156c1 HTTP/1.1\r\nHost: marsbahis-tamgiris.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-tamgiris.icu/?__cf_chl_rt_tk=69G0LjH4nQIL_qJVcXUrYv8dMftRBwwcd1b1RfHy1dM-1782660742-1.0.1.1-dQCFpq68u0RyPYKPEPvhWe4RK4In4Q8ZG8pTtKSQbf0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 15:32:22 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12dbe67dc3eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220710,"size_decoded":79232,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0dff29a3e5fa0a462aee8b60d2f45425","sha1":"66311b6fd98a6a2ffaf3af3319f03b5b0c792ba1","sha256":"3cdfcc330dd4c20d279945d7cb06ed83be98a68b65e919fba93e63a6578376c9","sha512":"38b5d3cf83f33cdeda95c173744922d9b24c6e191e7f1f899147ee95bebf412d3e9f9433c6f9b51a15b89575ddeaf578a04aa3e1fa8fa3801f9206b14563cf71","ssdeep":"6144:QQavq7tOrolx64J8TTZUaLYdU+fmDDvJ0d+RlvG6YW:l2vKd43J0d6","tlshash":"6024d78e34c1b7670336bab900ab216eff6f68c0940aaf0c841271fb7c5575da57b649","first_seen":"2026-06-28T15:32:52.84326Z","last_seen":"2026-06-28T15:32:52.84326Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-tamgiris.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a12dbe6a2ce60daa/1782660743111/44169b0063be16cad9f3e285e0085a070fdeb931a70dfe5cc94e2826c4aa55f4/b-aZORM4wZH07xN","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T15:32:23.446Z","timestamp":1782660743446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a12dbe6a2ce60daa/1782660743111/44169b0063be16cad9f3e285e0085a070fdeb931a70dfe5cc94e2826c4aa55f4/b-aZORM4wZH07xN HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/mxnpv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Sun, 28 Jun 2026 15:32:23 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gRBabAGO-FsrZ8-KF4AhaBw_euTGnDf5cyU4oJsSqVfQAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAxDKbk4RYZyL6XnTRyMLN4wCsxvmJhd3ftOd8yAXrz8VqFgtlvnKMefvXRO4zaElaSrpOMszh8KAW9Dsx69eFsAosPK4nvwsvfiyP6ZyhdxPLGuhjTi9yUrWzzkcXpKUD5oZ63WixlXmHZg-DGy34XBTBEDLpaBfa5nJjJuMdHFzFB3XZ4lKatFdK8sSGfXMAsUy10RQd9wnzBzarw_8QPnkBlqzJ4ZJmbO7eJ3Jx6rUKm0EsteVSMi1W_3UgNTuDSFntFLT7ivnApWTXp1kSxFIe5bwCn-1tnm7qDWHa8Q6WW3qloT-zXcLq1G6N4vNlnIldiS3oejrM7UI5IuMAFwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIEQWmwBjvhbK2fPiheAIWgcP3rkxpw3-XMlOKCbEqlX0ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsM0Q9MnygIFl0gZx3w9LhhcDl_7YDbmNzAMUL7Xnp9GXdfWl2k5SxpfB-K_QfmiV_H7Cj8P94IMqoWL8MDExqPL01M2yoCDweJGMNAm8hGbJvLjBAr9mXOZEx9Xd_a1oM6VTL7hmfywqDKr7NjnZtoftBNM7aAcQ3oFunMqwu32HSeDNBFCR6cLq3N_eldve-E2AWzdWXrQfBQ-vNheECU-_SCUvXG_5xxdQ2AO6mpnRaaSuo-pxQhD2t-T8yKziV-ecPidkSrDvocgKAILEibz6aNYuH7U8kF5zXOjI4xRH1FqVs43TY5dwNvmfYjI-w8NNqKpoa4azpJqv3m2DVwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIEQWmwBjvhbK2fPiheAIWgcP3rkxpw3-XMlOKCbEqlX0ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a12dbe6e8cd40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T13:30:16.496107Z","times_seen":473017,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/favicon.ico","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marsbahis-tamgiris.icu/","date":"2026-06-28T15:32:22.402Z","timestamp":1782660742402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-tamgiris.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 22:31:30 GMT","end":"Sun, 13 Sep 2026 23:30:04 GMT"},"fingerprint":{"sha1":"2B:CA:36:BD:8E:FB:E1:95:D5:82:2A:16:A7:3E:06:70:74:DF:15:72","sha256":"99:C0:EA:63:68:AF:EF:A1:44:1F:EA:AE:08:B8:5B:D6:06:D4:34:27:35:C2:12:F1:A2:88:AC:80:82:F3:A7:02"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: marsbahis-tamgiris.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-tamgiris.icu/?__cf_chl_rt_tk=69G0LjH4nQIL_qJVcXUrYv8dMftRBwwcd1b1RfHy1dM-1782660742-1.0.1.1-dQCFpq68u0RyPYKPEPvhWe4RK4In4Q8ZG8pTtKSQbf0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-ZJk0N8kMkPfbBFVte7GEQM' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12dbe680c3fb521\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9rts%2BSLaBjOfHxlKoV6F%2Fu8ZZrGU9hww2ET4Eaq1rHrMdQWCHk7qRJzjeQvK0L%2BG1V%2B5ixyUQc58N%2FgYuWGwe%2FXpYLfIIfPDlf51%2BrSGpFu8NZmN3j00rh%2Fn1Q0Jz3j%2FmECBhTP5Yma\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 15:32:22 GMT\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a12dbe680c3fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5915,"size_decoded":5809,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5915), with no line terminators","md5":"5e038446f7113a9743bfa1a371869527","sha1":"29ea7f71d334d6f86666111abdcee81d89443e9c","sha256":"ff67a0785fe1dbc5c5024494d894f6180c030dad00abed994f7d34544dd9f015","sha512":"92a6b04d917bd0440964eab0fce3c3692255198a6454e2f96ba2af6fd75224e64801f84be73fab1770c2bc4460c2b948b4ace6aa27c6726b677bb9621cc48069","ssdeep":"96:PNyXctoXZzIEb0EaW87m/Jjwwd6bc6fbRym93GQ6Rem27oeipf1zrv+zYzueh8Mg:PNttkCBg/MbTfbb3GQ68m27o3pdWsyl3","tlshash":"1fc12be37836502783755f9a44f7735dc367b616ee8181c4e4a0c96d91eaf1ec284298","first_seen":"2026-06-28T15:32:52.846533Z","last_seen":"2026-06-28T15:32:52.846533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-tamgiris.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/favicon.ico","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marsbahis-tamgiris.icu/","date":"2026-06-28T15:32:22.678Z","timestamp":1782660742678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-tamgiris.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 22:31:30 GMT","end":"Sun, 13 Sep 2026 23:30:04 GMT"},"fingerprint":{"sha1":"2B:CA:36:BD:8E:FB:E1:95:D5:82:2A:16:A7:3E:06:70:74:DF:15:72","sha256":"99:C0:EA:63:68:AF:EF:A1:44:1F:EA:AE:08:B8:5B:D6:06:D4:34:27:35:C2:12:F1:A2:88:AC:80:82:F3:A7:02"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: marsbahis-tamgiris.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marsbahis-tamgiris.icu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-YKNknBshk8U6oHahmkD5Bu' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12dbe69cc5ab521\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBJ3S02FU9izyKVHVM%2BOb0%2ByF%2FQJbGGSKwB9osRFzxbPbXoLWOeFOHK%2BfCe4a1il76n%2BvnWDIX3PcRilkFZ8RpPGdmT693%2F%2B8OXNbv6Rszuhviicrlojpah0wsSv2o4GkF9fslPY9vwR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 15:32:22 GMT\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\ncf-ray: a12dbe69cc5ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5766,"size_decoded":5686,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5766), with no line terminators","md5":"1ade10b205e196eeea21d65e7c00357b","sha1":"d4851d2ee6c6f06e33b8646e8a994ed8d107d834","sha256":"f57fa948a4d7ea123cd81a6fe0f118e5d48c1c1cf25dbfcf704e4c3251e98634","sha512":"8e95a2c505ab18df5d257dbe506e31f1ec68bdde4cbec4aec0a38da96d8acd76052b1c9e1b4d3cef48b6d17d7638fece760f12b96c404a6c55e294a3dbc84cea","ssdeep":"96:PNyStoXZzIEb0EaW87KQqJjyEaysu2LW0DIC4bUic+TDUZv8Yzueh8Ky0mw:PNbtkCBvojpaE2C0Qb0+evFyEKw","tlshash":"22c14bb3f87a101b9f6c6fc504a7b36ce262f249eb04d1e4e555d65d17c8f2e81a5084","first_seen":"2026-06-28T15:32:52.848518Z","last_seen":"2026-06-28T15:32:52.848518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-tamgiris.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marsbahis-tamgiris.icu/favicon.ico","fqdn":"marsbahis-tamgiris.icu","domain":"marsbahis-tamgiris.icu","tld":"icu"},"ip":{"addr":"172.67.187.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marsbahis-tamgiris.icu/","date":"2026-06-28T15:32:28.987Z","timestamp":1782660748987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marsbahis-tamgiris.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 22:31:30 GMT","end":"Sun, 13 Sep 2026 23:30:04 GMT"},"fingerprint":{"sha1":"2B:CA:36:BD:8E:FB:E1:95:D5:82:2A:16:A7:3E:06:70:74:DF:15:72","sha256":"99:C0:EA:63:68:AF:EF:A1:44:1F:EA:AE:08:B8:5B:D6:06:D4:34:27:35:C2:12:F1:A2:88:AC:80:82:F3:A7:02"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: marsbahis-tamgiris.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marsbahis-tamgiris.icu/\r\nCookie: cf_clearance=l9JfsPRSo_7DHO2fQJU2AEFbKcl6XFmxSPhaOVopOo4-1782660748-1.2.1.1-gE4IjvMC.vF4b9M1ot0VHZQcu8lrhiAD1fGBRg6WHtlielY4j_6EeOu4VRWd9k8luDSOraXbt2Tz8gCY9pCuEeYMz0cByqXeHpWen3ltCL9u64HtfhtwArueDGlIbVIQFneqUwFiQkW05oDllrOpRgohh7yL7Tqgcjs_DS3409spKj7lySV8odUTdQOK63t3nSD68S_ZpnOrLjKanlHOkPxGY4w9kdNiw3gaPKkHmMguDBuEa9FbI9O5ad5CRYR3vgEAgplBGintuKNkoGGqaj6GbAPfTiI79q7KSCrfSuUFszghVFqDukXzZtiSnpujgSD7Umf5Axn0.vh2KLpp3Hy9IkLIv8znQR2N7zSQ.vhnFYTxBWOZF0rsOVUieWM_g7rPvYXvX5CHVYxCxWC9Zv7s6JAOQ3HX8sPw2oya5aXkkSYnOZVIYuliBJWQuRpQqaEelrwqmRuKrwilDZTmW9caCBVyHF9RLx5SGbqhwybPOBAKWhct0x0UeCUiujwC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 15:32:29 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roK7%2BBJDhcCCcU5B%2BnPG5cKFIxhvXEzwNBmt7kUO7N0GKZM88D4WhHghWY%2Fur%2B0Eij5vwQDrGtkgrV0UcsNMmjyaQvfgNcGkOe0W7YFOz0bwe6Bfg8vk%2FU88fkfJXc8X%2FlIZwxxd2LGd\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12dbe912e22b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285,"size_decoded":863,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5ea184a1bd1bffe0b0d8c0f1c857b049","sha1":"30c6189606f98b1ea25eaa85f5ada39e8206f48e","sha256":"6814e6f6d1cf5e4877777eb40c548f39dd85861d3088494b48702e2d18615adf","sha512":"6aceb32ada540290e132ad65c7ea39c3f11c6e975391959d99cde8db321158b934bd4bb410c412a4c4ad8df5808763d0ffa4d0c43d3f3cedd7589539a31029e2","ssdeep":"","tlshash":"64d0eb9f4043a3830802a15038c216d2238d22faa03a81a83dc6d08702a8a3ecd8aa8c","first_seen":"2026-06-28T15:32:52.849946Z","last_seen":"2026-06-28T15:32:52.849946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"marsbahis-tamgiris.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
