{"report_id":"68802781-9020-426b-9383-81e3a45c3cfa","version":6,"status":"done","tags":[],"date":"2026-02-14T12:05:24Z","url":{"schema":"http","addr":"rtg.arcium.app","fqdn":"rtg.arcium.app","domain":"rtg.arcium.app","tld":""},"ip":{"addr":"172.67.205.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rtg.arcium.app/","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"title":"Arcium RTG","dom":{"size":10864,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5440)","md5":"7c9cc126a7c2391b1336d71aa74f8aa6","sha1":"b27caa0428886f0eb6d2ac467f65a0bed7d97b34","sha256":"14d1cf448e1e72dd560a7515cf36288e629b9230a511eba98d70d852d1f874e1","sha512":"8b5e66a255671c89c21cc581424a13f0a3b6ee40d91699c134b87384da7b2778509e2977e57567832882d008bd815da29e63e27ef389fd7e4ba5e08524c8ae6b","ssdeep":"192:7d35l7qezNoRBONLTc3Eka6b5AmAjXZhu/mWOQuAukeDscvsccsclscwG1dR:JpBqCNoCNEEka6b5Am0Pu/mwuseDdvdG","tlshash":"122209a3411a096741192ffa61a6ba8d9924f1c7cb234fc4f1ee15ac9fcfb66450372c","dom_hash":"domhashd1fde4860a8f1d069baad6e22d0002cb","first_seen":"2026-02-14T12:05:26.819745Z","last_seen":"2026-02-14T12:05:26.819745Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rtg.arcium.app","fqdn":"rtg.arcium.app","domain":"rtg.arcium.app","tld":""},"ip":{"addr":"172.67.205.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T12:05:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rtg.arcium.app","ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-09","domain_rank":0,"first_seen":"2026-02-13T14:07:59.926116Z","last_seen":"2026-02-13T14:07:59.926116Z","alert_count":16,"request_count":8,"received_data":3277557,"sent_data":3637,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rtg.arcium.app/flutter-web.plus.min.js","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f65f7aa465d83a15e8ed75766ce8a6f6","sha1":"9cb53438260da21b1271c44721447f7323474845","sha256":"d62d60d964589944785da8170ce64e504acb1e3d6e2e2ccdaa0f4b50c9c20e69","sha512":"f454ae78a6bcd20f93dd3d7fb9381050a986c86a36073cf220d6d22f16dfb48e4c54581ebf3e9df53f98b0ee28ab5a0d653f3dbc0bceec1a22889e290a587f1c","ssdeep":"3072:kgmlrGNQfeUxLMYhh4cT0gzaIQnqUdiJFkX+62aKpF3ZXV0Ignp+T0EcuVPoFD4K:kWNQ62aUDnDMPoNjFiN3XU0","tlshash":"6074429b078e249ceaac91606dd291ece392c4719655989ffcd3d1c7e01b824e1eb3c7","size":356455,"data":"","first_seen":"2026-02-06T22:30:29.909548Z","last_seen":"2026-03-20T19:05:17.128246Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app/","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b54650f30c1c8daca6491b4292ec222","sha1":"578b2d969d7f89afaba98bfbe14ad36c7ed8a193","sha256":"b46eeba0e463b30420d49e2abe4ab65bc95b7fc86b0e668af3c61644100d4516","sha512":"b323ba646c5c147f57435ce9271b7dee5ff525f0d2fb53544db2016d9cb9d7193f9e1854c4b8c972625f39e18b606a60505f40e3602d49909daee661227d1063","ssdeep":"3072:wWIl/FwMekxLKYhh4cT0gzaIQnqUdkXFCXEQ2UKLFrZFd06gnp+T0EcuVP8FD2HF:wjqb2UOPFXMRiNzhONdFW","tlshash":"a274319b078e249cdaac90606dd381e8e792c5719215989ffce7d2c3e51b424e1eb3c7","size":349476,"data":"","first_seen":"2026-02-06T22:30:29.92052Z","last_seen":"2026-03-20T19:05:17.139693Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app/LOsduXgJ.php?s=%2F%40v1%2Fcdn%2Fjs%2Fcross-env.responsive.umd.js%3Ft%3D29517845%26u%3DWPAUof-fGa6JYpj_GDY5NWNlZjZhZWI3MzA3NzkzNWFmMDJkZUnIo03Fq7L-cr0xfQ","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rtg.arcium.app/LOsduXgJ.php?s=%2F%40v1%2Fcdn%2Fjs%2Fcross-env.responsive.umd.js%3Ft%3D29517845%26u%3DWPAUof-fGa6JYpj_GDY5NWNlZjZhZWI3MzA3NzkzNWFmMDJkZUnIo03Fq7L-cr0xfQ","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rtg.arcium.app/","date":"2026-02-14T12:05:03.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcium.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 09:48:32 GMT","end":"Mon, 04 May 2026 10:47:17 GMT"},"fingerprint":{"sha1":"DB:53:79:1B:9B:84:66:C6:5B:2B:23:F7:E6:E0:DC:FE:39:2D:7F:62","sha256":"F4:8A:7E:DF:EF:DA:3E:D2:F0:50:97:D7:6B:CC:06:39:55:71:4F:9A:80:E1:17:B7:21:B2:1D:34:C7:FB:02:21"}}},"request":{"raw":"GET /LOsduXgJ.php?s=%2F%40v1%2Fcdn%2Fjs%2Fcross-env.responsive.umd.js%3Ft%3D29517845%26u%3DWPAUof-fGa6JYpj_GDY5NWNlZjZhZWI3MzA3NzkzNWFmMDJkZUnIo03Fq7L-cr0xfQ HTTP/1.1\r\nHost: rtg.arcium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 12:05:04 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PF9pGlVW%2Bhf%2BroVt1GvnUveskMTzmZ7dcvody3VnPVJSZPmb41KGV0UaWwwINzWr%2FnHNhfc%2B2rmw6vPGzQNzfHDY7mkYqGlwC3OiRIBQ\"}]}\r\ncf-ray: 9cdc6e7b4f91acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":666,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app/","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T12:05:02.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcium.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 09:48:32 GMT","end":"Mon, 04 May 2026 10:47:17 GMT"},"fingerprint":{"sha1":"DB:53:79:1B:9B:84:66:C6:5B:2B:23:F7:E6:E0:DC:FE:39:2D:7F:62","sha256":"F4:8A:7E:DF:EF:DA:3E:D2:F0:50:97:D7:6B:CC:06:39:55:71:4F:9A:80:E1:17:B7:21:B2:1D:34:C7:FB:02:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rtg.arcium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:05:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 03 Feb 2026 13:32:12 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWAxRpPuERQDjJ1qLCIQ56PpqlZhB7c5UcWDgG1yO1XHbAtG01gi4N28JmjYKRdv%2FmZCsOTNwlPEIhBaImMRtTD%2FZzkGM%2FoOvuY30P0o\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdc6e755e1345dd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11596,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5232)","md5":"a0eddede40831ce8c444e3b462404843","sha1":"8da6ec04f3b29d3bff3e96b324dd0756ea570f95","sha256":"206d9c7db66d5b21562b35a935dbcf56d9e567f9b7e2659e93e3d5fb9f5d43ae","sha512":"d91c9b706f24617d242f62636a892103be8e0d627acdef2f3134974df5d2c391a2e4d2e86ea750977c13e5654b0a6270f38e5b7b2ad21fadf340a3e5182465da","ssdeep":"192:zd3UFzNoRBONLTc3Eka6b5AmAjXZhu/mWxQuAukeDscvsccsclscsG5:hklNoCNEEka6b5Am0Pu/m5useDdvdcdL","tlshash":"28321893411a09a746292efb65b27a8d9524f1c7da230f84f0de15ad9fcfb62850372c","first_seen":"2026-02-13T14:08:02.285762Z","last_seen":"2026-02-14T12:05:26.822258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":57,"dns":24,"connect":8,"send":0,"wait":41,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app/assets/css/app.css","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rtg.arcium.app/","date":"2026-02-14T12:05:03.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcium.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 09:48:32 GMT","end":"Mon, 04 May 2026 10:47:17 GMT"},"fingerprint":{"sha1":"DB:53:79:1B:9B:84:66:C6:5B:2B:23:F7:E6:E0:DC:FE:39:2D:7F:62","sha256":"F4:8A:7E:DF:EF:DA:3E:D2:F0:50:97:D7:6B:CC:06:39:55:71:4F:9A:80:E1:17:B7:21:B2:1D:34:C7:FB:02:21"}}},"request":{"raw":"GET /assets/css/app.css HTTP/1.1\r\nHost: rtg.arcium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtg.arcium.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 12:05:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Feb 2026 13:32:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6981f8dc-20dbf3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 79046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CkXLF6N0TRKODqMgcjImOknhzmVPRusKunOW5yX0DVrMifP2G9zDo30ZnE3IkOMvqwBTym9zSUPRucgZ7g2YNnJxqjUNxm%2F%2FaZD0yop\"}]}\r\ncf-ray: 9cdc6e76cdb2acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2153459,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40672)","md5":"cce720df8148464328c220cc2067dbc7","sha1":"e6e491d9aa7171d178236d50ac0122b1b95830c2","sha256":"c6cdf654f8c56e728f48e3af4c6b5ef3d5430677a39e963ae3eeaa5baff2b5d7","sha512":"8fb47658251672368813abdbd3dec6a9d9fda2977bcb22c2f4f4622cc6d23c45398eb41a7a3a6602ef9260ac549025442d32d8d0ba781495899f235e07a30cad","ssdeep":"12288:bGaXymEYhPxE8YfMbJSPMlVMa/s5+EWNXD95MaNUCDufihdE6Y3E+3o6afKiH:B+YhPxE8rbUPMZSWXZ52CGihdEwMdaC+","tlshash":"e625bfb2b157fdd61bbd1d80441c3e608c5c2ce7931cea98f9881ad6b1e9114ef6c8b8","first_seen":"2026-02-13T14:08:02.294919Z","last_seen":"2026-02-14T12:05:26.823481Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app/flutter-web.plus.min.js","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rtg.arcium.app/","date":"2026-02-14T12:05:03.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcium.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 09:48:32 GMT","end":"Mon, 04 May 2026 10:47:17 GMT"},"fingerprint":{"sha1":"DB:53:79:1B:9B:84:66:C6:5B:2B:23:F7:E6:E0:DC:FE:39:2D:7F:62","sha256":"F4:8A:7E:DF:EF:DA:3E:D2:F0:50:97:D7:6B:CC:06:39:55:71:4F:9A:80:E1:17:B7:21:B2:1D:34:C7:FB:02:21"}}},"request":{"raw":"GET /flutter-web.plus.min.js HTTP/1.1\r\nHost: rtg.arcium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 12:05:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 19 Jan 2026 17:42:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"696e6cf5-57067\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 79046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QygsFyw9T060uc885GeL9kOseepHZy7XMhHaNjKj4l%2FR2Tdj04sENdR0Vb6BsWcdTE9qJCb2Y0RCZTGrVzMP7ffzUc2ny2VVeNUW2wGX\"}]}\r\ncf-ray: 9cdc6e76cdb3acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356455,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"f65f7aa465d83a15e8ed75766ce8a6f6","sha1":"9cb53438260da21b1271c44721447f7323474845","sha256":"d62d60d964589944785da8170ce64e504acb1e3d6e2e2ccdaa0f4b50c9c20e69","sha512":"f454ae78a6bcd20f93dd3d7fb9381050a986c86a36073cf220d6d22f16dfb48e4c54581ebf3e9df53f98b0ee28ab5a0d653f3dbc0bceec1a22889e290a587f1c","ssdeep":"3072:kgmlrGNQfeUxLMYhh4cT0gzaIQnqUdiJFkX+62aKpF3ZXV0Ignp+T0EcuVPoFD4K:kWNQ62aUDnDMPoNjFiN3XU0","tlshash":"6074429b078e249ceaac91606dd291ece392c4719655989ffcd3d1c7e01b824e1eb3c7","first_seen":"2026-02-06T22:30:29.909548Z","last_seen":"2026-03-20T19:05:17.128246Z","times_seen":15,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app/secureproxy?e=ping_proxy","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rtg.arcium.app/","date":"2026-02-14T12:05:03.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcium.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 09:48:32 GMT","end":"Mon, 04 May 2026 10:47:17 GMT"},"fingerprint":{"sha1":"DB:53:79:1B:9B:84:66:C6:5B:2B:23:F7:E6:E0:DC:FE:39:2D:7F:62","sha256":"F4:8A:7E:DF:EF:DA:3E:D2:F0:50:97:D7:6B:CC:06:39:55:71:4F:9A:80:E1:17:B7:21:B2:1D:34:C7:FB:02:21"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: rtg.arcium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 12:05:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bV2FQVibxBVEiBJcrPg0orlJ1u%2F9Gan%2B%2FyyMqmUzRL%2FTxTujRm4IyEvNBAwgNWJl4yiszjwV9BE5RL5srXzDlvW3HAEJFGMHZQ5qEONg\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 13:33:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cdc6e797ed0acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-05T09:56:45.582877Z","times_seen":7410,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app/assets/bg.mov","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rtg.arcium.app/","date":"2026-02-14T12:05:03.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcium.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 09:48:32 GMT","end":"Mon, 04 May 2026 10:47:17 GMT"},"fingerprint":{"sha1":"DB:53:79:1B:9B:84:66:C6:5B:2B:23:F7:E6:E0:DC:FE:39:2D:7F:62","sha256":"F4:8A:7E:DF:EF:DA:3E:D2:F0:50:97:D7:6B:CC:06:39:55:71:4F:9A:80:E1:17:B7:21:B2:1D:34:C7:FB:02:21"}}},"request":{"raw":"GET /assets/bg.mov HTTP/1.1\r\nHost: rtg.arcium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 12:05:03 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 10179438\r\nlast-modified: Tue, 03 Feb 2026 11:58:10 GMT\r\npriority: u=4,i=?0\r\netag: \"6981e2d2-9b536e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-range: bytes 0-10179437/10179438\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nfRVNbHSCwh8u3T8sJPC2pVZZmbCgNsgrGJFnabkBVfr%2F%2FBin6nSqf2DgEw1xZd4jOkm9J8%2B9Hvwn7cxndxjsGYahiEprpmSBL%2FwaytD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc6e7a1f00acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69210,"size_decoded":0,"mime_type":"video/quicktime","magic":"ISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT)","md5":"b6d3bbde6aa144ab896cb11782105b94","sha1":"bf823d829a851ca7e09fe1d952a9dffc76ec4840","sha256":"54309153c1c86a4206f4a7c3ebdbc9c1bfeef26b17b14d6bac6b25a35779e38a","sha512":"785ddfa0e38ae63e04a48f0359c1775879b2b766369ffb18d2a11296d015a3f971675f4fd1cb0bc9d3d8e6fb3f766170911baa5022f504352d8c27b104f3caab","ssdeep":"1536:qR3Vy2wXebCe54TFUWz5DXG2cQ3lN0uAHML/lBAbRED9ZHZo:ay2EdfTyWz5T7j3lpgkoE5M","tlshash":"2a63024e9f951290466604938f08d722e7ab90e2c89f085a71d47d8ff9d522607fff4e","first_seen":"2026-02-14T12:05:26.828198Z","last_seen":"2026-02-14T12:05:26.828198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app/assets/bg.mov","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rtg.arcium.app/","date":"2026-02-14T12:05:03.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcium.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 09:48:32 GMT","end":"Mon, 04 May 2026 10:47:17 GMT"},"fingerprint":{"sha1":"DB:53:79:1B:9B:84:66:C6:5B:2B:23:F7:E6:E0:DC:FE:39:2D:7F:62","sha256":"F4:8A:7E:DF:EF:DA:3E:D2:F0:50:97:D7:6B:CC:06:39:55:71:4F:9A:80:E1:17:B7:21:B2:1D:34:C7:FB:02:21"}}},"request":{"raw":"GET /assets/bg.mov HTTP/1.1\r\nHost: rtg.arcium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=10158080-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 12:05:03 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 21358\r\nlast-modified: Tue, 03 Feb 2026 11:58:10 GMT\r\npriority: u=4,i=?0\r\netag: \"6981e2d2-9b536e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-range: bytes 10158080-10179437/10179438\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30PXHMp7ZKoJ35pAz0cNWQnzKqczkPITVlJ9V%2BTaSs4rMXuPABDT282NcBYwe71fRQb%2Fn3M4xyMLSe5vch9K0YUoihy1xeOlx6Gz7Dcg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc6e7a7f19acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21358,"size_decoded":0,"mime_type":"video/quicktime","magic":"data","md5":"0ba0edc2c27c828847e7fd6aa16b4921","sha1":"1e5e239664c2b8499743b349790944acdab2254c","sha256":"0ab1b000a04b6c53550f01aad46a3e37ab4345ade821e9e6de8c91b0035b901f","sha512":"6a93772fa80a2557528e4827d9dd0f8ede09f53174f58e371d1cc26cd9b00b2831c16091293c307de0efc82c4a94bfe34f05cedd48200b61781da7adbcf15ca4","ssdeep":"384:r7gjD/8O4zl5r/m2s/Q3Ytj9hZKZZqqAHQ5lh+IT:r8n/IzDrKKGf0kelhfT","tlshash":"8da2e6a0bb02e945cc433ef15e82c7242f16f5695f2d1747b6a703fd9cae2165c9a309","first_seen":"2026-02-13T14:08:02.296868Z","last_seen":"2026-02-14T12:05:26.829566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtg.arcium.app//LOsduXgJ.php?s=%2Fjmpd%2F","fqdn":"rtg.arcium.app","domain":"arcium.app","tld":"app"},"ip":{"addr":"172.67.205.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rtg.arcium.app/","date":"2026-02-14T12:05:04.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arcium.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 09:48:32 GMT","end":"Mon, 04 May 2026 10:47:17 GMT"},"fingerprint":{"sha1":"DB:53:79:1B:9B:84:66:C6:5B:2B:23:F7:E6:E0:DC:FE:39:2D:7F:62","sha256":"F4:8A:7E:DF:EF:DA:3E:D2:F0:50:97:D7:6B:CC:06:39:55:71:4F:9A:80:E1:17:B7:21:B2:1D:34:C7:FB:02:21"}}},"request":{"raw":"POST //LOsduXgJ.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: rtg.arcium.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 2196\r\nOrigin: https://rtg.arcium.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2196,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 12:05:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2B3HWCuBCvB3RXlTOURbHPE4vQ45dPUTXASDCQ%2FeNBjPluBgrriJprfj1Fsi57XQxQI1NQ7%2B316P8hqNrEOQ8R6zSuMJ0uHQ3aeWi%2Bwu\"}]}\r\ncf-ray: 9cdc6e822a5aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c0ade92eab6e17e60c616495a148701","sha1":"f65d2a1830b2ed0831d902708c650057230ef3e2","sha256":"8e4c52be8099b70f60e9f433bdbb6b3a7c7513108231fc934e51dc6d957422c2","sha512":"84d0130ec3104cf4eacda09c56bbe2766c42afd5b683c6e6bf11a46b420079150f0fc9bbef72a8b5f34afff9524b0ebec59512c58e3b1b5764df0030d8b21a53","ssdeep":"","tlshash":"a9d09551041df3ef47f7d8d021860a443105604d250400691fdc5300513da5c5c1443e","first_seen":"2026-02-14T12:05:26.830494Z","last_seen":"2026-02-14T12:05:26.830494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rtg.arcium.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}