{"report_id":"68e4d355-2f11-4b76-a747-4ff55b07b4fb","version":6,"status":"done","tags":[],"date":"2026-03-16T22:56:07Z","url":{"schema":"https","addr":"dataoptimisation1.shop","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"172.67.158.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dataoptimisation1.shop/#/pages/signin","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"title":"Login","dom":{"size":32950,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11711)","md5":"f7256bf5605bb03d51c95ff89b461071","sha1":"a6f0fb08899cc6d53e5c47bb942a43c4155697de","sha256":"08c952de76c47e811a6693b198f3d9a669ab35f1a221b5a1568fee27007297fa","sha512":"c1c923152b9e52c33132f41941c3f1beb81f2afd29ba96b9c9a4a300683588bac66efc0059abe097b6ce64e0ac941e744cb4e5ee82bc1302dde3dac82e4f351f","ssdeep":"768:bLtxsJwEW31/v8I4FZ5s2izs2YKs2rpyrrxRco/7:b5rB3eFZ5s2izs2YKs2rsrrxRco/7","tlshash":"38e2b632b00e341ab53bd8a5b4e1cf2c2126d313c9134a5db7ad27764fc78d62979b98","dom_hash":"domhashb1dd72da39f545d29f3bc178503bff1c","first_seen":"2026-03-16T22:56:12.374942Z","last_seen":"2026-03-16T22:56:12.374942Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dataoptimisation1.shop","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"172.67.158.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-20T22:56:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"dataoptimisation1.shop","ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-02","domain_rank":0,"first_seen":"2026-03-16T22:56:08.449657Z","last_seen":"2026-03-16T22:56:08.449657Z","alert_count":81,"request_count":27,"received_data":4288617,"sent_data":14420,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xiaobai.tw","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-22T14:29:49.429993Z","last_seen":"2026-02-22T17:46:34.828766Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"3.baiye.im","ip":{"addr":"192.200.102.158","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-10T17:35:56.072912Z","last_seen":"2026-02-22T17:46:34.802659Z","alert_count":0,"request_count":2,"received_data":2514,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-03-11T19:06:51.074238Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dataoptimisation1.shop/","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec0086722d72ea95d1e97d455d135c91","sha1":"136c72ace1875c1206b274ca0cf24ed33a11d9a6","sha256":"9ea1492b35a3f52f61c72ab9690242149455b8068d149dff181d54532437f552","sha512":"a6377bb19cce90e385c3cd941eaa1ae27e18d70e1ce90f4e2e5cf5a9c5141069539c442aeb8f5c8a13378a8acc1043c1e84bb2a8593ed6ee026e7303e97bad47","ssdeep":"","tlshash":"fce068c360aa294c0120801a304ac0032bba08b29ec149610c487ba58ab9e4bc46e859","size":343,"data":"","first_seen":"2024-11-11T19:54:28.271167Z","last_seen":"2026-07-29T16:34:02.711999Z","times_seen":802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/index.e675fab1.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a1ef422b4c6feef596fc7beb02cbce9","sha1":"e226b8b36dfece331cf787d30953dfd1274b7f86","sha256":"982621cfe8d5559bdf46b8005fd3590f711194da16cf2071371dd49dc8a9acb5","sha512":"6a1312c9a1f946d8142f7ec300ebed4ece9db7c7fa19b43e05e907d32fcaa8fedb2f93bf7752b6c6700eda8ab76c74a7480b2c9b81e8f7bc6bcfbe386cdbe174","ssdeep":"1536:SQZeGWujHsC3c/KfOrxj/gXxRdsujWPu9yn2b+W8YG5+ue6kbhcs9wjHLo0qez9E:SQzHIe13ch2GS","tlshash":"08832a9a30ca9f77254272aa6cdf547560613ed0c9cdf80583eaeadc9f4a3468373b14","size":87803,"data":"","first_seen":"2025-12-24T02:15:35.980263Z","last_seen":"2026-04-03T23:24:03.009308Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/chunk-vendors.86f23591.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a94c88d3772cf7029e3fdc483f74c8c1","sha1":"7c4404019c43ad5e73d13474084f26db931280ee","sha256":"d0139214d19ab60135b9fef18c0a3a36d9f2c6a500323f9a387437d27b45843e","sha512":"4eb1af8a95434161334ae213e4b4006e3d4fb62ee71809ec0809444d3c0cfda81c049d3858d7b56f1d45cd6d5c90776c0fe3e65fbe85e128fcddb0f3cdea904c","ssdeep":"6144:I6tC/t9X3fkN+V4KFUXtwTf3nrb3L7vv0NTMfYEvm/40+Qh8J1vQzbe9WUsu4N:I1115UdwTfj7n0t1i0wvQzHUq","tlshash":"a305f78df282b0b607e760b5403f220bb2376959b40ac4d8f675e4d4ad7894e6227f7d","size":832353,"data":"","first_seen":"2025-10-08T08:40:46.222036Z","last_seen":"2026-06-10T03:55:11.254309Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/pages-index.4c3285ba.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19130afb0fb29c285efb55e9699ff5d4","sha1":"a65dd3e7f5fc3a6bfbf8512f1b7ea56785aa7b83","sha256":"92f01c6ac9fdf86b40f63404b3ec2c30d0c35f43cd9001d216a99721c81b10f2","sha512":"310f7955be51066f48b55b1ed200cbbfc670ba050e07423548d6a550096e42970d75fa5c232d901dcd0dbdf8da5b7c4847dbcf1aecf437fe448e65ea3b314e12","ssdeep":"192:IbnjJGKqRs9+aT8xOQKsbOKbn1VQYjG5V+JrlMrocd:IDjJG/RkQKs371Tj8Ve2","tlshash":"1e82d924b18bf09f4c279451607f493990373fb5e916e88ad7f0d8d88aa49ce253ab5c","size":18064,"data":"","first_seen":"2025-12-24T02:15:35.957574Z","last_seen":"2026-04-03T23:24:03.002017Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/pages-article-article_1~pages-article-article_2~pages-article-article_3~pages-article-article_4~page~96b5c975.23501755.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27ab8b4125a9ab41c7f160044e426f59","sha1":"4040a4603b33aab16007ad335b4bafbe4bfcf2eb","sha256":"7a2020729fb5ca6d7e93ebda4f41872f67a9ef4e8787d1a8e5c77a91949bc519","sha512":"dacc387819e9b28eeedf97e394f2a035d5177c7ebc400fe6eb1e69478d9488152165646939dc5c45a0ec26e3f8146a5601f4628f5a8c43ad8a493b02c61072f6","ssdeep":"192:MY7GgpWEwy58y6XnDLoHoaE/G3M6QA275TqOcTulTjLQXf/47PE:MY7G43wTLG3M6QBTqTulqMPE","tlshash":"8842d44db0d4f83e09877cd5039e111290efaf59c969bca6a7e1b1e19a76488f019f1c","size":12571,"data":"","first_seen":"2025-12-24T02:15:35.955769Z","last_seen":"2026-04-03T23:24:02.994091Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/pages-contactus~pages-mission~pages-payout~pages-security~pages-signin~pages-signup.a45386e3.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d855f2fcc6104c22801ccfab3c9ed97","sha1":"cbf97f4d6a9b765b1cdab9e184d821ff9e0c0862","sha256":"4e5cf78e51d3317642ed8925caba3f1cf67ee6294188bfcdcde7a33a02757550","sha512":"a21465e6b2ffe19151725c6d3b1123df1d0da45ae4675fab2f7fc44778471d254888c671b869dd81ac0c879aabb34c7fa946335f0c784a00a3ee3a9625ee8450","ssdeep":"192:goElF4L1PI5RtYtPDEA1SsChZZmYc681gR1oqaLKCBUm+iMaAHLXKv:goo4FPDP1Cczd","tlshash":"6362ea09b1c870661e87b474507f5f0fd127f6d85c11ab58abb1f1f08e966cf2066b29","size":14810,"data":"","first_seen":"2025-12-24T02:15:35.952813Z","last_seen":"2026-04-03T23:24:02.985013Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/pages-signin.5014a5e5.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce56ac0cafb4cd9f446433f56b7c6002","sha1":"3cf378c1ae1762067c9c04e3e689acb2fd4c2c7c","sha256":"9895d52822f7c4da01bd5ef5b60bde84fc80c4778ac8ff19d2dc15dab4d971c7","sha512":"d721fb20e7214d85b41ea29fb489701b6e8a8296d455fba696c58b52729db64ba3e6720f870a911baafe07f361f4882e3c598f33e0d1c81f78e8c194ad164746","ssdeep":"384:46QKJZUd1ntjNt8XJ9gF86dYDc9GvaxjRlG9G:N5ZUDntjb8Z9gF86dEBadTV","tlshash":"24b2fa29b0cab4672d57d87420bf5f1c0037ae99d811b985d7f1a1f00e66ecd2266f6c","size":25479,"data":"","first_seen":"2025-12-24T02:15:35.977538Z","last_seen":"2026-04-03T23:24:02.999611Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/bar/bars1.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/bar/bars1.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-439a\"\r\nexpires: Wed, 15 Apr 2026 22:55:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxMk6%2BTKtboL0MalGoQ3m5mjfkvOqgZeWxZfybTd1sSgWw6bqaqK4ifh9IprM423tdZuGvXsYloEMWA2GrN5AMtOXOWHjMx5TOG%2FRq3df2WSPwCnQ0A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f01bdea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 183, 8-bit/color RGBA, non-interlaced","md5":"4de7f346a51a15fa0cf7b9fa687e53d6","sha1":"f8301e2cee7a899877496d88f9c5ef90e96555d1","sha256":"3dedb30f826e9bafe1b400fe95b4187da52855fb46973e01a979adddd17c59d3","sha512":"3e1ff9fc208ff6a66fdd5616956e6e4010424f74024941feaa56d0cb1d3d077f326f0d7553152ec12c540a95508f056b7ff93deb35d0b6685d8fce5b030460bb","ssdeep":"384:phrfw0+07aw8crnuf6hcFRXFv7ImSpV8uGpzm6cpUSoHOij:jw0nW9zRhfa8usypUSC","tlshash":"e472c0ceceb4b2cdc09901f249cf2386cd52fd12a7159e083d99576fc28099c565a73b","first_seen":"2025-09-22T14:30:00.276348Z","last_seen":"2026-06-10T03:55:11.245634Z","times_seen":19,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_rk_1.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_rk_1.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-3112\"\r\nexpires: Wed, 15 Apr 2026 22:55:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xY0laM5OM6ZCW4zdV4P3ZIJjEzEgz5sklFYbyptdVX9eoJoUlW5O1x6D%2BLEfXegaEBb44xUvG7Ehrpju9ioJ0jnRIZ8k1ib8WC3vlUotm9qQBoqKdys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f38e7ca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 114, 8-bit/color RGBA, non-interlaced","md5":"79bb4a7342007b0a1ca6fc5d4cbcf601","sha1":"0de4d4834ea086a5ef52685a521fe148035c5a22","sha256":"91c5f43c7e55d7ecef07c59752af96b88860609122ec6d3d40c0ade3983056cb","sha512":"6ab9b027d26d07fd08fd2229571f742a26f86a211fe2f7eb19af3f4b4ba895f9efce99bf92ec2ffcf97cbb45b980cc142ad0116eb1c293fc931b674027a11308","ssdeep":"384:5CKMmFXxw6kJ0k44njKyn5vMCQvSR9OKacWnB:5CKPtzkCk44njKa5MKYPcg","tlshash":"7042c0347e1ce52c9d6963513cb5eb3ea51e54ebbc44c30a9e27196a631b88f0cc343a","first_seen":"2024-10-04T10:41:43.112978Z","last_seen":"2026-06-10T03:55:11.242104Z","times_seen":20,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaobai.tw//upload/6c0a348347cd6cdd/92845fb6a83cff57.png","fqdn":"xiaobai.tw","domain":"xiaobai.tw","tld":"tw"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:49.087Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET //upload/6c0a348347cd6cdd/92845fb6a83cff57.png HTTP/1.1\r\nHost: xiaobai.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T13:28:06.233495Z","times_seen":17690637,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3.baiye.im/sdapi/index/getServiceData","fqdn":"3.baiye.im","domain":"baiye.im","tld":"im"},"ip":{"addr":"192.200.102.158","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:48.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3.baiye.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 18:16:03 GMT","end":"Sat, 16 May 2026 18:16:02 GMT"},"fingerprint":{"sha1":"09:AD:E6:2C:0E:FC:98:E8:1A:E0:89:1D:19:D1:E4:4D:EB:1C:72:FB","sha256":"DF:17:08:70:0E:78:DE:8A:75:1A:51:0E:C2:34:DD:FA:41:FF:93:BF:32:6D:B2:03:9A:65:EF:10:91:EC:2A:49"}}},"request":{"raw":"POST /sdapi/index/getServiceData HTTP/1.1\r\nHost: 3.baiye.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 21\r\nOrigin: https://dataoptimisation1.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"token=\u0026language=en_us"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: https://dataoptimisation1.shop\r\naccess-control-allow-methods: GET,POST,PATCH,PUT,DELETE\r\naccess-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With\r\naccess-control-expose-headers: User-Token-Csrf\r\nset-cookie: s86725e29=h3iibmj5sovrhfeeqvs5r5jnp7; expires=Tue, 17-Mar-2026 03:05:48 GMT; Max-Age=15000; path=/; HttpOnly\nserver_name_session=05b0bc9b880b208bfb69de0fc85e7f40; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fc2eb208924d440fd54fe9431cfa8a96","sha1":"91a62e0cd0a48ac8157c42f1d24c5bb5d46aec84","sha256":"60edfad2b7b9f38adfb101924f435e323617e9e8da982112f3d45f09b595df60","sha512":"408b9853ff8dc4872c64595075788fe6508d71ace40cd7eb38af12da09cb834153e17658c9a7170be1cf4404e6f6a8e3c17e93d639ae5416cc4d58961622077d","ssdeep":"","tlshash":"24c0c0873aa7fa0399d43cc079873275c34430038d80f102b069fa21483d076f566c63","first_seen":"2026-02-22T17:46:37.709246Z","last_seen":"2026-04-03T23:24:02.993161Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":351,"dns":75,"connect":135,"send":0,"wait":391,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T22:55:45.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 22:55:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Jan 2026 23:18:34 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZSWGRLli9nU68tyQvPIRXYwSztyF%2FxL%2BZI%2B%2BLOZBO7LvddoRzhVtXatEHypb%2BTggOSQMJLbEqpPXEOWj87nDHyIXxdmFZ568t0%2BiySxZgvk8g8%2Bxj7I%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dd758e46b6675ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":820,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (491)","md5":"6a6ebe8c175877e96fcdb983d2098ab0","sha1":"a0474baf32a235aee60e8731fb54e13b16567827","sha256":"482133360a8d8202ca785068e2d36fe1ba3cc689d3896d3b1faefd6d93407b08","sha512":"082988a13d9f1421e6b50b0b9463abd1e6ddb2e45d246398b046f931197d93ad403be3aff55b9ad57d79c867b7ab51b32d8eb5227e0db7f899eba9808df5156f","ssdeep":"","tlshash":"b80146832c54e44d1b2084456477e52e8deb8db47ea1dd501cc62dbd49e4bcece3f855","first_seen":"2025-12-24T02:15:35.966962Z","last_seen":"2026-04-03T23:24:02.977006Z","times_seen":4,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":39,"dns":17,"connect":1,"send":0,"wait":467,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_rk_6.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_rk_6.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-1daf\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=abFWysH6puGDIJMPKH6HhgRfIYucUGWwvwXJPSHZ%2BMK7cP7n0388%2BvH%2FqZMta0NqsmKMDSXMArTTpJFk5hzOuDLxHO%2BaEaLpeos6BmyE6RlxDRnf0Ro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f39eaba0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 90, 8-bit/color RGBA, non-interlaced","md5":"3fe7c7bf6bd41c58bbff24bef9495f16","sha1":"7eedc75638b2132ff82b1874920e7c069c7e0abd","sha256":"d641586bb57003047cea6d1f8483eeef10f4418e2e3425bca85c05c4a5476fe7","sha512":"63e306e0fce5091ad8239d491a9ce29c08674a49ce4017197e6463909b764be11c8388e7f683733e01eee1b71a27e7e7c373706cff7d22e4885810ca174db28d","ssdeep":"192:7A4w1zlrYwqf1CQYDc67QqBkrCLgo43GGb2Ev0:k411CQYg67Qq6CUGS2M0","tlshash":"c4f1cffb2b4470e82f0c48780877045b7aa7080d0392a09dbf67f46b3fa706e9521608","first_seen":"2024-10-04T10:41:43.078771Z","last_seen":"2026-06-10T03:55:11.269943Z","times_seen":20,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_rk_7.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_rk_7.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-1c81\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnBcS4aSYTBG3oxiJcrvKBWmgeqadxNs0N6seA9gZJ8kals0O%2BtZZnGRsL4Is0z9jpF0TrVsMBnMziBBzxu7TK0koHa7jhyg3fLFSaLExvBcp5A4r48%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f39eaea0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 90, 8-bit/color RGBA, non-interlaced","md5":"119ce3e0d961d46c97f3118326ea4eb2","sha1":"9ba4a4901c8449f8b8b8e0bb1913df21c38dd746","sha256":"26feb599bb30f32ad8462143114454a1c8c0fdb030f46feafa25596c84209a2e","sha512":"b86c95620a5a8e885c3fd6ea28822b9bf14427abf21ffb1de691f7eda645ac3294aa315e8df6c6f9c13c5a301bd84072cbdc70a23ed3a81d59c998eecb27412b","ssdeep":"192:c8D40Mpgqf3Q7yDTTAuO/R5x5E2O8Pdo05VOTcbg:V00Qga3Q7u0uOXIHkdoM4Og","tlshash":"91e19e14bef39bbd4af91cc7f3641e48b6a0cc9c905a693ad0c5da20d553d0a48692b7","first_seen":"2024-10-04T10:41:43.08178Z","last_seen":"2026-06-10T03:55:11.251116Z","times_seen":20,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3.baiye.im/sdapi/index/getAppInfo","fqdn":"3.baiye.im","domain":"baiye.im","tld":"im"},"ip":{"addr":"192.200.102.158","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:48.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3.baiye.im","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 18:16:03 GMT","end":"Sat, 16 May 2026 18:16:02 GMT"},"fingerprint":{"sha1":"09:AD:E6:2C:0E:FC:98:E8:1A:E0:89:1D:19:D1:E4:4D:EB:1C:72:FB","sha256":"DF:17:08:70:0E:78:DE:8A:75:1A:51:0E:C2:34:DD:FA:41:FF:93:BF:32:6D:B2:03:9A:65:EF:10:91:EC:2A:49"}}},"request":{"raw":"POST /sdapi/index/getAppInfo HTTP/1.1\r\nHost: 3.baiye.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 21\r\nOrigin: https://dataoptimisation1.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"token=\u0026language=en_us"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: https://dataoptimisation1.shop\r\naccess-control-allow-methods: GET,POST,PATCH,PUT,DELETE\r\naccess-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With\r\naccess-control-expose-headers: User-Token-Csrf\r\nset-cookie: s86725e29=9a3elk394if03rppk5a3fq900d; expires=Tue, 17-Mar-2026 03:05:48 GMT; Max-Age=15000; path=/; HttpOnly\nserver_name_session=05b0bc9b880b208bfb69de0fc85e7f40; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":301,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8709ee9cea3b63fbb6e615c7f6df98a8","sha1":"05df46cbc5775c93123645e1c3c09b9ae29d03be","sha256":"0de3977376cccca0ff15523cdc11b58d9ce61aed9e81c00b543002fb800b06d2","sha512":"f46ac4edc22935a5a2288a095044497bfcc46b7aa61da51a552ae65d35cf6e7ff7b5253f7ff9343fb1b1e1291bb3510c7f0a043794dafa7777a87082ab27ca18","ssdeep":"","tlshash":"0ce0e7f7c180c41c42483ac90c49643e86c91c2f0c487f409bbd0c4bc27017d704f534","first_seen":"2025-09-22T14:30:00.294713Z","last_seen":"2026-06-10T03:55:11.282809Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":351,"dns":74,"connect":137,"send":0,"wait":390,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/level.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/level.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:47 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y3t9j43thg1DSJ91m%2B3loXMahTIprV7AGltwZ3tYrJ80Z8CjLgt5bSElBuaq5YWBvdS5jpQkmgoZ2nagL2xBXvjmmixB%2BxeOc%2Fb%2FguFHss3Psk5Ttys%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd758f39ec4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-03T13:25:44.329747Z","times_seen":546088,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/area/en.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:48.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/area/en.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-c69\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qor9Rumpiut8Jn0sMUM0LEZgF7IlIEF%2Br5ao%2FSeQRksCjo7v2CTSAN8UsaS73z2tTuO%2BZVb96AbUh1Ep%2Ffbu69S8SdOY6qLYuLpw5Foh%2BgKq3uCCkcs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f6a8b2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 58, 8-bit/color RGBA, non-interlaced","md5":"21eef5e61d10e1bf22d84c552cffefd3","sha1":"7b9dfa0691d6ddb639f4be6b4d3c476925e40482","sha256":"e72b2d50a151681c8af47300bd201089267fa7483befdfc11729c4e57fdf2b71","sha512":"2903cbbd2929ecf8b63a27ba28ff3b08d1012419d605c2c82d5730eabf9546b5f42f5ea2caf4ae079f8b104a3afc3c60284cc5d5263496382ed2bbd6edffc833","ssdeep":"","tlshash":"43615d6ad39ab602da39023a42332658ee31d93b1802c86d56a9f6b9d11b745765f402","first_seen":"2025-09-22T14:30:00.327463Z","last_seen":"2026-06-10T03:55:11.238337Z","times_seen":17,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/pages-article-article_1~pages-article-article_2~pages-article-article_3~pages-article-article_4~page~96b5c975.23501755.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/js/pages-article-article_1~pages-article-article_2~pages-article-article_3~pages-article-article_4~page~96b5c975.23501755.js HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-3153\"\r\nexpires: Tue, 17 Mar 2026 10:55:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2CinrzYpwfcQJQF%2FZc9JgQCo%2FO0kTFRNBebH%2FNadU9G3jEvP2hkweI%2FyzxfEGOninak9QXQYAwQ2oYwNmjPEiq1FieLjvMusf8NJyGPDXLbzperaF4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f00bd0a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12183), with no line terminators","md5":"27ab8b4125a9ab41c7f160044e426f59","sha1":"4040a4603b33aab16007ad335b4bafbe4bfcf2eb","sha256":"7a2020729fb5ca6d7e93ebda4f41872f67a9ef4e8787d1a8e5c77a91949bc519","sha512":"dacc387819e9b28eeedf97e394f2a035d5177c7ebc400fe6eb1e69478d9488152165646939dc5c45a0ec26e3f8146a5601f4628f5a8c43ad8a493b02c61072f6","ssdeep":"192:MY7GgpWEwy58y6XnDLoHoaE/G3M6QA275TqOcTulTjLQXf/47PE:MY7G43wTLG3M6QBTqTulqMPE","tlshash":"8842d44db0d4f83e09877cd5039e111290efaf59c969bca6a7e1b1e19a76488f019f1c","first_seen":"2025-12-24T02:15:35.955769Z","last_seen":"2026-04-03T23:24:02.994091Z","times_seen":4,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_mesg.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_mesg.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-1037\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VSoE7rxvpXhKm6qiem9qVBRPXxRuvBrRCkacKnH8LcP30HZQQZU67paak9vNOCoVfuDq6LJh0jWkIel%2BnyP3H5KDuWeSgRsypWJvV6q2zMZM5gb2aM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f38e7aa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"0af043656013049da0419e4dfd2b7c60","sha1":"677a6b8ef2a49d03155e891a04ed409a857cb9a3","sha256":"3c19c24d0705952a7a472317ba9f1b0b2324582c276af438d553a8863092f734","sha512":"5dad5fa03b91efe5f668c1c94fe7bfe561eab79fd1af180cbe2863b29da37a5df754f9a4ddb3239d05cea5dfc9e744a4aca7ea9af86399f00307af7ee9d9fe8d","ssdeep":"96:iL86SzHa35FLggVtfoYncuxzgqQtG/5TFDZTWa:zvMztcuFLRlZTb","tlshash":"ee817ed2af6001c3d84b8d3121f144b1a464d49f6bef58b9759cb5ba0f181e6fdc292a","first_seen":"2025-09-22T14:30:00.325823Z","last_seen":"2026-06-10T03:55:11.248712Z","times_seen":18,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_rk_8.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_rk_8.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-2616\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ic6Uw3HycEyd3JfJwGsy8jhkePJU2TRja0GL4aUUReoXcckLsWBCZtWZqiA6V0EhdIEE9flbV4IMSHJTi0FqkpTi2W7Dfn6Dibsq0Cvh0fXB2bhh8gE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f39eb6a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 91, 8-bit/color RGBA, non-interlaced","md5":"cd71666b66602b3b671294548d435e77","sha1":"b350c0ea5d8d5e12d37ea52dd7a79e561572a5a5","sha256":"e02b2306af0e4f0d405d7051962c1b2fae9d05f64a335032189b2b29c876ce0e","sha512":"9f427ac77d44f58a391bb193e3de2b42ae30c36cd687d5713e466883b3a5b8afc155f045f694f4987c74744fbda154a21b19a8cf9571ca05faf8b8e4e761ae9d","ssdeep":"192:GZBMEF6XjRYKXyfCOhbTebjaBAwAY9TwvU5t8phEqwY:GZBMhjPXyKOhAjAXAYpK/Y3Y","tlshash":"1e12d0ef76297df5c2e0c930b41934b40e2b59379bc020e63a2f26b65be69c25b04023","first_seen":"2024-10-04T10:41:43.084696Z","last_seen":"2026-06-10T03:55:11.263302Z","times_seen":20,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:49.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Mar 2026 22:55:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Tue, 17 Mar 2026 15:55:50 GMT\r\ncache-control: max-age=61200\r\nset-cookie: __uni__uid=rBEQVWm4ina5N2TyA3dHAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-03T11:16:08.590852Z","times_seen":20135,"resource_available":false,"data":null}},"time_used":1492,"timings":{"blocked":625,"dns":38,"connect":242,"send":0,"wait":242,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_rk_5.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_rk_5.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-2dd2\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N333k6N6hGAYO3GUyvxyEE%2BV%2FRQiSwFuL0IogMpVLeFyXPi4qlJZTea4olaCEPT6cqgaeDlIz4r%2BGosnNTkJNst6ByJHXtj3oAj1z3NBPsDqOWiVZfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f38e93a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11730,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 105, 8-bit/color RGBA, non-interlaced","md5":"cfb030785445bd6066f576ad90335c1c","sha1":"d099b32cee2634e059ebe71abcf3b884d377aded","sha256":"317f6ca399967d385647dd6f303ceac17cedebd7bbcca025c167eac282ff875f","sha512":"e24789801c44f9eba7e7665797c853d4b11eb89c481c3609d7737c261e1e218627af8dc129211f783278f7a4ddef35b6e587645d6fce09edfde3a518f044e058","ssdeep":"192:3gPU7DUhOGsfovv4RncOgTBboA4QDq7sK+Du1udM9t0sFq72fDI2rj/bDlOaRpJV:xrGLvvuncOsoQW7sK+D/wtJFg2EIvhrT","tlshash":"fc32afeacbd48369c4dd0264813bcae9e37c323c7ff517ac1156a851a1b3618c8681e3","first_seen":"2024-10-04T10:41:43.076917Z","last_seen":"2026-06-10T03:55:11.277205Z","times_seen":19,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_banner.mp4","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_banner.mp4 HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2933187\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\netag: \"6922ad3c-2cc1c3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-range: bytes 0-2933186/2933187\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TAj%2BYD3iaOBlSmJIvrhjve%2FMIkRZO09e466s4tGRpWV91uBRHGcuGScTcPRnJWzic5R7MvC9Q63bSo1C6Tyil99XpUw1lyA3psLh5jgNZgsYIu3Cv%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd758f3bee2a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2933187,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4e7c5a9664459c4951dc3ce37e7d333d","sha1":"2543f9c1966cfa21cd6660018131fee7a1b1dbbe","sha256":"30d246b139745ee85ad386f6ab64d2c8d80136451531a31a4bf9ca017ea4054c","sha512":"00e8e10007b3e057ebbc5926c0d3f73031ed5792049e40aceb83a2b22bb6e55a9ef1ac054c7fa8db3b21fa4a1fd2a29fe4409657b1171663dafdfcbb806310b1","ssdeep":"24576:nhxyOcQdX+OvQtObGV+dnxtlKmqzesBtN:n2OcuvQAbGU/KmYntN","tlshash":"4e2523321ad01f03986d7ebd59d68802fdb45a4f9ac9b7f38dee8324bd8702127a4d54","first_seen":"2025-09-22T14:30:00.292572Z","last_seen":"2026-06-10T03:55:11.243847Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":949,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaobai.tw//upload/52c63f45fc6b9d47/32f7f76e64e94e83.png","fqdn":"xiaobai.tw","domain":"xiaobai.tw","tld":"tw"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:49.081Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET //upload/52c63f45fc6b9d47/32f7f76e64e94e83.png HTTP/1.1\r\nHost: xiaobai.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T13:28:06.233495Z","times_seen":17690637,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/pages-signin.5014a5e5.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/js/pages-signin.5014a5e5.js HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-6387\"\r\nexpires: Tue, 17 Mar 2026 10:55:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPu0mFJhIHlRk70IgMZ8YFCBHQBnX923o52XJZgM%2FdgrgyGjSlKnORv7M0OEzQiKLpc7qd4vI8OH5xkj7FnSAEhO06DET%2FBk8trSdAS0DmcXC4%2BuOxI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f3aedaa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24869), with no line terminators","md5":"ce56ac0cafb4cd9f446433f56b7c6002","sha1":"3cf378c1ae1762067c9c04e3e689acb2fd4c2c7c","sha256":"9895d52822f7c4da01bd5ef5b60bde84fc80c4778ac8ff19d2dc15dab4d971c7","sha512":"d721fb20e7214d85b41ea29fb489701b6e8a8296d455fba696c58b52729db64ba3e6720f870a911baafe07f361f4882e3c598f33e0d1c81f78e8c194ad164746","ssdeep":"384:46QKJZUd1ntjNt8XJ9gF86dYDc9GvaxjRlG9G:N5ZUDntjb8Z9gF86dEBadTV","tlshash":"24b2fa29b0cab4672d57d87420bf5f1c0037ae99d811b985d7f1a1f00e66ecd2266f6c","first_seen":"2025-12-24T02:15:35.977538Z","last_seen":"2026-04-03T23:24:02.999611Z","times_seen":4,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_foot_id5.jpeg","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_foot_id5.jpeg HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-12377\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MtA0cm7dSGr6rUCKqt0gQueQkAbnXNRq%2B5tqcvcDHQ8Ogp2emi05muuZZcmSAR74TCoXtTZqoGvIx6QSIk3nooqyXRUVrhtDrh%2F%2BstNljFzkU%2BP4lEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f39ec5a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74615,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 750x430, components 3","md5":"45cdee666bc9c7a15cda49562cde4da1","sha1":"8ff552a592d975b7efbe0acaec9d1b276d80ee62","sha256":"7164598ca0b4dee28cc8327048a200fa029d5fb4a529525d244eb9140ee5cbd9","sha512":"be2f475c232d3a9edd5813005fd41247efc53508a9d0fb7d697191287309758a4b4a41972b1e7a95ccc091560ea737c6c8ce201527b60dabfa26010e1089b9cb","ssdeep":"1536:It1SGt3IqmBZpDJvhkrwIosCt8kCRiHleK8EXhjpF6gE:uDeZxJvhotoVt8kCRhKXRE","tlshash":"7373e0177c09d300e72910e4be135fac0923bfbda21774fb66652dda3ea91260c8d43a","first_seen":"2025-09-22T14:30:00.305423Z","last_seen":"2026-06-10T03:55:11.234899Z","times_seen":18,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/login_ke_fu.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:48.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/login_ke_fu.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-1a30\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gPoWBuuaNblRTcYQQtBm7oQqzBcnGo8cdI40rusuKq8EmbZMb5zJJFOAl%2BQdx2h5hBlMle0XeCYj2fNF0CqRwBkrHhnbAFR0vHdqD3HPQpVCFRqwJ9s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f6a8b4a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"faf297a46fc457f6eac8ca04a769a0c0","sha1":"fc7c98f0aa5155c42f9d2efe76d6c1704fbaf223","sha256":"186765a7a58997b7fdb7c7283ed9c7d9e3f22ab2365de36f23f6b30c494e04d8","sha512":"e36fe7c744099df6023715edbca2c13d5ea47ffec166cc0897ddd36e7bbb805ba80611fb12fe09af88fc38466e6dfac7a7a87b62908c3a93aca9c5fddf19746b","ssdeep":"96:58ryPHcCUFOUaUqmf67Wf+YVtlu84DB1tLpjnPvConiHuUG0EYA32xa:iOb38qR7WGx849jZnCrH0Gxa","tlshash":"dcd19e04ea644fc578db0eeeace0d8017d609e6585b61824331f68af2b811b6bcc38c9","first_seen":"2025-09-22T14:30:00.280296Z","last_seen":"2026-06-10T03:55:11.272084Z","times_seen":19,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/index.e675fab1.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:46.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/js/index.e675fab1.js HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 07 Feb 2026 04:39:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6986c213-156fb\"\r\nexpires: Tue, 17 Mar 2026 10:55:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQNqGR6412jrPBJFh3c4%2FjANZ8TcO6xTvet2fuTHmj9qnUBf3PV0GTnrj05dbCc5KN%2BsTDFKaVI8tcLG2IoBPsDt9puIbgLBep2YQsdCQu3Rk2qt6gI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758e88e51a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87803,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56769), with no line terminators","md5":"8a1ef422b4c6feef596fc7beb02cbce9","sha1":"e226b8b36dfece331cf787d30953dfd1274b7f86","sha256":"982621cfe8d5559bdf46b8005fd3590f711194da16cf2071371dd49dc8a9acb5","sha512":"6a1312c9a1f946d8142f7ec300ebed4ece9db7c7fa19b43e05e907d32fcaa8fedb2f93bf7752b6c6700eda8ab76c74a7480b2c9b81e8f7bc6bcfbe386cdbe174","ssdeep":"1536:SQZeGWujHsC3c/KfOrxj/gXxRdsujWPu9yn2b+W8YG5+ue6kbhcs9wjHLo0qez9E:SQzHIe13ch2GS","tlshash":"08832a9a30ca9f77254272aa6cdf547560613ed0c9cdf80583eaeadc9f4a3468373b14","first_seen":"2025-12-24T02:15:35.980263Z","last_seen":"2026-04-03T23:24:03.009308Z","times_seen":4,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/pages-index.4c3285ba.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/js/pages-index.4c3285ba.js HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-4690\"\r\nexpires: Tue, 17 Mar 2026 10:55:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFgVdCGFC3e8ht2Raxc1OzCXIXg1%2B%2B4lf8S9uYsN8Z2IaQNvczzz2%2FwdXUaBt9HXhpJD9FSelKAyi2zbUBZ0xat7lkqsU%2FcytL%2Fmd5%2BQCepiIIBQ7wY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f00bd3a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18064,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17432), with no line terminators","md5":"19130afb0fb29c285efb55e9699ff5d4","sha1":"a65dd3e7f5fc3a6bfbf8512f1b7ea56785aa7b83","sha256":"92f01c6ac9fdf86b40f63404b3ec2c30d0c35f43cd9001d216a99721c81b10f2","sha512":"310f7955be51066f48b55b1ed200cbbfc670ba050e07423548d6a550096e42970d75fa5c232d901dcd0dbdf8da5b7c4847dbcf1aecf437fe448e65ea3b314e12","ssdeep":"192:IbnjJGKqRs9+aT8xOQKsbOKbn1VQYjG5V+JrlMrocd:IDjJG/RkQKs371Tj8Ve2","tlshash":"1e82d924b18bf09f4c279451607f493990373fb5e916e88ad7f0d8d88aa49ce253ab5c","first_seen":"2025-12-24T02:15:35.957574Z","last_seen":"2026-04-03T23:24:03.002017Z","times_seen":4,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/bar/bar3.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/bar/bar3.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-1f7b\"\r\nexpires: Wed, 15 Apr 2026 22:55:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Ypz3HIo4TyuAQX6fkvH8uXgLx9ktE2LcAi0wf0yaMvVMwN2btvf533EWlFRvFWM5lgEsoNXmieuXwf0Fk0CdPmUVN4KpZ8Hf8zBc0ren1Nr90COrJs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f01be5a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 183, 8-bit/color RGBA, non-interlaced","md5":"cbe2e724254d9b39fcfea0042274bd96","sha1":"4eee9d6dece7894b442307a9f90f541f5b74b71f","sha256":"7eb1697bf237335559104709509d4278f766accc6cd994440e1b877e6b8ec791","sha512":"784be10f91269bb3286fb8971624a702a846b0cbe48c5edc95272a31c3ff5eed6e76f7e2522389044d8f986d9b4b8f9ce3d026adb03641c4b89d666329eb09e3","ssdeep":"192:pNZW450WlOtRMskXSXIMJhX3hRVUdTi+MwLOP0E:pNKWlOAskiXIMrXxRV6T7acE","tlshash":"3bf1aff0eb93c2ced59059324bc953f1b54285627192e7263364502e8f0677b459f6c5","first_seen":"2025-09-22T14:30:00.288313Z","last_seen":"2026-06-10T03:55:11.257667Z","times_seen":19,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/assets/fui-icon.a4e4f91a.ttf","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /assets/fui-icon.a4e4f91a.ttf HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 39840\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\netag: \"6922ad3c-9ba0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWRZwvlgQPS6AH81RcNDzUmgVjd0SU%2B7tNXQ%2FcCaFfBQXLRKwzIQGydoNVYA%2Bo0PXo8Wsb1JBmEkYGATcm5cuG4wnDkjrJifI0ujrck45iT3PfFjlFE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd758f35e49a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39840,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Created by iconfontfuiFontRegularfuiFontfuiFontVersion 1.0fuiFontGenerated by svg2ttf from Fonte","md5":"a4e4f91aa667ac9efcbca9350ee20585","sha1":"b893a5bd6af738f049d66377387f20251015a39a","sha256":"9165208c3c2060bae6d8746c50acb129119ba4f55d98515cd3f082cd0b69775e","sha512":"7ac27dee17bdeff7df250bc7acbabaa20f65575f15ddf1f7bf16421e61320a5ad3e5e58d9744abb5f47eb8bde7eb4f8346b9ec4e53083c5a2a479f97f7d4eda7","ssdeep":"768:KNNFsXekphznzGbXQNwRWD9Axlo9bhaSNnB9tqpDs5ej0RAlxbrEM1jRlpl5VQPM:smXecznzGbXQ2kD9Axu9bhaSNnB9tqpf","tlshash":"f5035d78535d5ffaf6b843bf44638191d4bfb701d888dfab6505912a080bcb61260afb","first_seen":"2024-08-19T20:00:00.815296Z","last_seen":"2026-06-10T03:55:11.24729Z","times_seen":76,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":411,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_rk_2.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_rk_2.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-29cc\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NbXS5BoWAAtI3TZUwv8NvMh%2FOCmlU%2FVwnotqg8Q%2B5S0a7mDAXxF0moMg3aQP0AI0c3y6dPzeOCSqNrEx0CtZNisiVQyURqYeLQmkkgLHqKf6Y1EFgjc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f38e7fa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 104, 8-bit/color RGBA, non-interlaced","md5":"44b4303a8b755fbde14678e6561f4399","sha1":"d9a651edf77ec130a9c8737ffef58f7334e59769","sha256":"8a6c2f3744828ef8bd4fd11e215264acf81e370ab437e824f5f1fa34d6dd2770","sha512":"fa51e039c9d12d208877c9fc5bd9e44432636a727e63c77655e504b0ce06dfe5f3e711897fa9271f724ea86dd5931eea85fb6e71e107303bbfeee258d3b78580","ssdeep":"192:9Xaz2vG9DlQOUB28sF5yOkIou7MPMddrt8SSJqCm3KwW50mtV0Ub6x9OWRSaN+XI:9SoG1lQOUBmyOkIoudHsq132rVZ62WJT","tlshash":"cc22bf122045dff2e61a90e7c79e2d92fe1a1aac5c30f91db12d3719048d251997859c","first_seen":"2024-10-04T10:41:43.072968Z","last_seen":"2026-06-10T03:55:11.258999Z","times_seen":20,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/index.883130ca.css","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:46.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/index.883130ca.css HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-1793e\"\r\nexpires: Tue, 17 Mar 2026 10:55:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSfMNLnkrWLyM04QzcaPT0nlhcavAAXBaj1dk%2BJhA0M%2F9EBUKDZxJAVMOo676K5KPLOk%2B4%2B3yOyVlHA5XhVsUi99EiNxOxenmtWWLnTuxkBjdI0EeAc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758e87e4ca0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-08-03T11:16:08.597424Z","times_seen":5199,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/bar/bar2.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/bar/bar2.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-1dbf\"\r\nexpires: Wed, 15 Apr 2026 22:55:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0lbUjjdgPIeDQa5XMcHIkPoUGP6XaklLPps1VKJcvFrfAkqppWtCjqt0mpwrHVYO80alA9JGDG4Z5CYej1VjfkIRov%2B8Uc8i%2BAC7ttw5SIZy%2FrT2T8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f01be4a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 183, 8-bit/color RGBA, non-interlaced","md5":"facd7a5bdd3658c97883e16eeb8df04f","sha1":"7e9695fa238ceedc07ff1490af661951d790b03a","sha256":"af5eb699f473fe7f9ae600dd0a587430d65cf60cecefcfc2d3ab501f6c065ad7","sha512":"650defd1d1c6473235e9111a00f2696fc35d377058200cecfccc8a9b4a4aca55e9d4976b25b1a22aea4b493b887b8674f2e481aa0c9b4030a08e55c0e6555cf8","ssdeep":"192:pz3S666cQPNm8DZjqaG08+by5uFzDRTXAy19d4OtXV6666i:p8QPD/txbyE9DlQyWOt4","tlshash":"b8f18e10457c1a86fbdee939c8e864a35c3ae0006b6e47217bfd83eb07154d763ad55c","first_seen":"2025-09-22T14:30:00.318073Z","last_seen":"2026-06-10T03:55:11.268451Z","times_seen":19,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/favicon.ico","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/favicon.ico HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6922ad3c-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3Sb2a1vJ%2BNFKAkv3%2BBQXpAriQ9mczAlNXWpNpuU%2FWt0jR%2BtwPHOPx3jOz%2FLZvmYahYxnh0ovmGVy6h0ByE57Pw01rOnCM1fAYUctUneeoAxRc0TAjo%3D\"}]}\r\ncf-ray: 9dd758f35e3da0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"eb2768718d0e26ba4dcf1e4197870f53","sha1":"0187487df8d075c33bc0c5c9330e904e7e1f5337","sha256":"79e4cf316ded22b4ce67afc1e60a9b454bf25c1446c851fd763ad37e0446d160","sha512":"acc040af76c60912836a233f43f5d4cdbf22e0fe46b91995a4c31e5e7461a8d4c9b8ff095f7507b132794f4705ded51b023be10ff8a018d1abc33f7021c3efc1","ssdeep":"24:suK89anhpwa4qqPa12R9Mia4qqMWalZnmMdY+Q83Wa/aO8Y8L3aWRdaWC9a03krq:PahpS69rZPP8LTJRu0rn5SIo","tlshash":"e791fff35644ac65d45a1a7c4232d6bed6bf6e9c6931f20219e6fc3b7e362c21880c43","first_seen":"2025-10-08T08:40:46.19674Z","last_seen":"2026-06-10T03:55:11.28055Z","times_seen":14,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_rk_3.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_rk_3.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-2c4c\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeAG7s%2FO0J0chjicExfLCoS4PB9JbPmI96rYkcDOlKkjKK6GEG8D0gRd7tpveyGQt1NMicaaK%2FhWP02LasY229Rb%2B98gTvv2SlzG4L%2BBuXSAww7ZmIk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f38e84a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 93 x 104, 8-bit/color RGBA, non-interlaced","md5":"357912005ed94e891266d9901830dec3","sha1":"8bf427250e99943604d57dce312d81381fb204b2","sha256":"177813ff49e052f409d2e4924596a4e8af85ae17d383c69a5da7222aaee0f27f","sha512":"26e46eeffb6b8f325787f195306be0f7c369fe52c08d8aa7a449461d130e6a84f9c30e194e3cfab898a479eb3d7e08a7453fd0853d2ec125f31d2788a9723908","ssdeep":"192:asYelKjtcBEXTR3rpkLMLRwy4EvnMgqm3PUjVowkgSS8nYrKBb1:asYelsWBEj1r2by4qRUjOwk+8Yy","tlshash":"fa32c032de97485c77a55bd3c91b20a7be6fece411b86a0917e3e86004ed9b70521370","first_seen":"2024-10-04T10:41:43.114681Z","last_seen":"2026-06-10T03:55:11.281806Z","times_seen":20,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/object_1/idx_rk_4.png","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/object_1/idx_rk_4.png HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-251b\"\r\nexpires: Wed, 15 Apr 2026 22:55:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRq%2FUKzAldDyrZ2YnRtoY9gvDHyfLQNZt01glm2qvxtUKFOHd3S6Gu2FmEeEZa3avdcUt5p2ICA3%2FM143fsdWvvmQKnJplaxDnALDaFGGr8l7K6RGHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f38e92a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 82, 8-bit/color RGBA, non-interlaced","md5":"97479d1efd4604b1f3e16e428f0e3e94","sha1":"0d39182cc2f7038ecfbbedf173d410be5e26ab24","sha256":"ae9f7644cd525181273411ecfad7d79b1813761194372643007e5cdf773562f0","sha512":"cbc175d09f41371148a4bdc66f1c6fa716d1d4cb9c2b317276df0c6194d9e80dfee0d4af78374837ec08c49456f8eecc2413c3dc5af5aee78f8a57968694ab1f","ssdeep":"192:O8niUhw/hOY2T4nNopu8Ir0tFyHeFNI+2K94nnu0kzLsKa5VdjKS9G/YZ:O8niUy/l2TSoI8L8+FC+NM8LhmdjKc","tlshash":"1112bf20156bb13b5896ae2683cc7dacfe23621cf01a50d14ee9e0b39366f8c7070811","first_seen":"2024-10-04T10:41:43.075957Z","last_seen":"2026-06-10T03:55:11.233373Z","times_seen":19,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/chunk-vendors.86f23591.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:46.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/js/chunk-vendors.86f23591.js HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-cb361\"\r\nexpires: Tue, 17 Mar 2026 10:55:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jQ7wZg07bp6MDcESEOQmStk4GiIxVIwUyT4oljnwFFqrZhPSEk%2FTyaoHTQqNjkyugDKARletpIcxzf3HnmW6QM2%2BTuvcmSuvFGVYta0L9jwwBvodIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758e88e4fa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":832353,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29646)","md5":"61342a1b28d8011f1cd6fe7e3f167f06","sha1":"6516d9407bece86133285de5547575630277e50c","sha256":"ea295649fdb525d4597522332a0aa893b7a95a502673da800b194f9c814e77e7","sha512":"950165896368f2d5a0cf2a942abe5381241db274ddd6abb9ac14dc8628ed3f13c6becda5ebfd0473e61a3648cd9a5417872e24165b07cd1a83cdd5ba87073f32","ssdeep":"6144:I6tC/t9X3fkN+V4KFUXtwTf3nrb3L7Ev0NTMfYEvm/40+Qh8J1vQzbe9WUsu4N:I1115UdwTfj7W0t1i0wvQzHUq","tlshash":"9a05f78df282b0b607e760b5403f220bb2376959b40ac4d8f675e4d4ad7894e6227f7d","first_seen":"2025-10-25T12:29:34.785974Z","last_seen":"2026-03-16T22:56:12.432093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":399,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataoptimisation1.shop/static/js/pages-contactus~pages-mission~pages-payout~pages-security~pages-signin~pages-signup.a45386e3.js","fqdn":"dataoptimisation1.shop","domain":"dataoptimisation1.shop","tld":"shop"},"ip":{"addr":"104.21.50.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dataoptimisation1.shop/","date":"2026-03-16T22:55:47.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dataoptimisation1.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 05:55:23 GMT","end":"Wed, 29 Apr 2026 06:53:00 GMT"},"fingerprint":{"sha1":"B3:F5:E1:F9:84:A1:E6:31:B0:B9:C2:83:21:4E:45:E1:CF:5C:DD:DC","sha256":"D4:91:6E:4F:44:8C:8C:8A:80:AA:29:4B:98:F3:65:33:8C:F5:82:E6:07:6D:90:C2:DD:36:67:CE:A5:8A:FE:44"}}},"request":{"raw":"GET /static/js/pages-contactus~pages-mission~pages-payout~pages-security~pages-signin~pages-signup.a45386e3.js HTTP/1.1\r\nHost: dataoptimisation1.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dataoptimisation1.shop/\r\nCookie: server_name_session=8dacb1b2dd7cddb9d75dcf793adb30b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 22:55:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 23 Nov 2025 06:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6922ad3c-39da\"\r\nexpires: Tue, 17 Mar 2026 10:55:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dn6kON2JhevDjtxa3L9PUeo1f%2Fl6j2iJ1PqQMd5Ut8OFbfVlOMn2%2BFmS%2BBeQvFz7fErwLIeyk1VO32J0ilVqnwDFSvoMFuPbT0NEA0TRSxkk0jXWec%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd758f3aed9a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14810,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14810), with no line terminators","md5":"1d855f2fcc6104c22801ccfab3c9ed97","sha1":"cbf97f4d6a9b765b1cdab9e184d821ff9e0c0862","sha256":"4e5cf78e51d3317642ed8925caba3f1cf67ee6294188bfcdcde7a33a02757550","sha512":"a21465e6b2ffe19151725c6d3b1123df1d0da45ae4675fab2f7fc44778471d254888c671b869dd81ac0c879aabb34c7fa946335f0c784a00a3ee3a9625ee8450","ssdeep":"192:goElF4L1PI5RtYtPDEA1SsChZZmYc681gR1oqaLKCBUm+iMaAHLXKv:goo4FPDP1Cczd","tlshash":"6362ea09b1c870661e87b474507f5f0fd127f6d85c11ab58abb1f1f08e966cf2066b29","first_seen":"2025-12-24T02:15:35.952813Z","last_seen":"2026-04-03T23:24:02.985013Z","times_seen":4,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"dataoptimisation1.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}