{"report_id":"6d88ce86-3457-4aef-ab0b-62166afbd79f","version":6,"status":"done","tags":[],"date":"2025-11-12T13:48:27Z","url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"title":"HDSector.to : Bollywood:Hindi:Hollywood HD Movies","dom":{"size":1476,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e160e144dd8ac3d0849e463f41217a9a","sha1":"756d2604ddf7b08426b2ebce6f1012d24abdaa3b","sha256":"fcb90e7d75894f8592355eec166ac1eb81d358575776c4c504002c26f7cc2c45","sha512":"2e3bb7b21507cd5023742b2444e99f2eeab0fe3fc7c70141f6b386b903888c3e649c9439067073519ec5068b7123a217642d8bb374bcd293895a8f8f0cbf4327","ssdeep":"","tlshash":"6a317d5edcd8c72b16c251c2f4317b0dd6b0591aff14290137ae8bf19f9ba068c16485","dom_hash":"domhash38918a912ed0af936f18976dbff2ea09","first_seen":"2025-11-12T13:48:42.915894Z","last_seen":"2025-11-14T14:44:14.784851Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-17T13:48:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":29}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T13:47:58Z","timestamp":1762955278,"ip_dst":{"addr":"172.18.0.4","port":54466,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2025-11-12T13:47:58.214912+0000\",\"flow_id\":1474056667645322,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.30.49\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":54466,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"hdsector.animeproxy.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://hdsector.animeproxy.net/?__cf_chl_rt_tk=D6k3AIw4O8V6nvuP8b6_9whyd_YG4XTyAzvGH1GB5cQ-1762955277-1.0.1.1-EVhrRCJd9N2yN_PTLkvOjXrKTiCxoUFTZqIka.O1VAI\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2151},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":6217,\"tx_id\":1}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":22,\"pkts_toclient\":43,\"bytes_toserver\":2488,\"bytes_toclient\":55246,\"start\":\"2025-11-12T13:47:57.902538+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T13:48:08Z","timestamp":1762955288,"ip_dst":{"addr":"172.18.0.4","port":54470,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2025-11-12T13:48:08.220108+0000\",\"flow_id\":407680712514375,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.30.49\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":54470,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"hdsector.animeproxy.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://hdsector.animeproxy.net/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2151},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":6217,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":841,\"bytes_toclient\":3271,\"start\":\"2025-11-12T13:47:57.990023+0000\"}}"}],"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"vmuid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"origunix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-09T22:13:15.523411Z","alert_count":0,"request_count":3,"received_data":41074,"sent_data":1170,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cordbraghare.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-10-17T05:20:11.255078Z","last_seen":"2025-11-07T19:09:17.891992Z","alert_count":24,"request_count":6,"received_data":202867,"sent_data":4397,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"msdoj.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-07-01","domain_rank":211684,"first_seen":"2025-07-02T02:58:17.140394Z","last_seen":"2025-11-11T09:59:42.530026Z","alert_count":0,"request_count":2,"received_data":64950,"sent_data":982,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-11-10T01:38:56.234977Z","alert_count":0,"request_count":1,"received_data":845,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-11-12T04:22:12.576178Z","alert_count":0,"request_count":1,"received_data":111321,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"origunix.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-30","domain_rank":343993,"first_seen":"2021-11-30T12:40:27Z","last_seen":"2025-11-12T13:21:27.96333Z","alert_count":1,"request_count":1,"received_data":64562,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-11-09T22:18:20.349235Z","alert_count":0,"request_count":5,"received_data":465669,"sent_data":3818,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"18.198.104.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-11-09T22:50:08.036512Z","alert_count":0,"request_count":4,"received_data":1724,"sent_data":1868,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-11-12T07:12:12.984128Z","alert_count":12,"request_count":4,"received_data":343852,"sent_data":1437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"matomo.hellohi.me","ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-03","domain_rank":0,"first_seen":"2019-07-03T20:13:04Z","last_seen":"2025-11-12T07:35:11.384485Z","alert_count":0,"request_count":1,"received_data":630,"sent_data":341,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-11-10T07:43:18.574464Z","alert_count":3,"request_count":3,"received_data":6190,"sent_data":1506,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.242","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-11-12T02:09:22.444542Z","alert_count":6,"request_count":3,"received_data":1590,"sent_data":2082,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"heartilyscales.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2022-12-16","domain_rank":2862533,"first_seen":"2022-12-16T08:32:11Z","last_seen":"2025-11-12T07:35:11.322436Z","alert_count":27,"request_count":9,"received_data":190148,"sent_data":7751,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.253.132","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2025-11-10T00:58:47.710465Z","alert_count":12,"request_count":3,"received_data":15161,"sent_data":1294,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-11-10T07:43:18.490589Z","alert_count":54,"request_count":27,"received_data":566208,"sent_data":11127,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hdsector.animeproxy.net","ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-30","domain_rank":0,"first_seen":"2025-11-12T13:48:33.115164Z","last_seen":"2025-11-12T13:48:33.115164Z","alert_count":74,"request_count":35,"received_data":515527,"sent_data":24581,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]}]},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.108.68","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2025-11-10T19:43:12.040174Z","alert_count":6,"request_count":2,"received_data":1050,"sent_data":1004,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vmuid.com","ip":{"addr":"178.162.215.162","port":80,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-22","domain_rank":182910,"first_seen":"2019-07-09T14:53:12Z","last_seen":"2025-11-12T08:39:21.387182Z","alert_count":2,"request_count":2,"received_data":11210,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-11-12T13:47:59.819291Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":344,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-11-10T08:41:17.624255Z","alert_count":0,"request_count":1,"received_data":5916,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-09T22:13:15.598397Z","alert_count":0,"request_count":1,"received_data":21447,"sent_data":574,"comment":"","tags":null,"fingerprints":null},{"fqdn":"x3os.com","ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-18","domain_rank":19468,"first_seen":"2025-04-24T02:39:31.647355Z","last_seen":"2025-11-07T06:03:28.789318Z","alert_count":1,"request_count":1,"received_data":814,"sent_data":608,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T13:47:58Z","timestamp":1762955278,"ip_dst":{"addr":"172.18.0.4","port":54466,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2025-11-12T13:47:58.214912+0000\",\"flow_id\":1474056667645322,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.30.49\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":54466,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"hdsector.animeproxy.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://hdsector.animeproxy.net/?__cf_chl_rt_tk=D6k3AIw4O8V6nvuP8b6_9whyd_YG4XTyAzvGH1GB5cQ-1762955277-1.0.1.1-EVhrRCJd9N2yN_PTLkvOjXrKTiCxoUFTZqIka.O1VAI\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2151},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":6217,\"tx_id\":1}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":22,\"pkts_toclient\":43,\"bytes_toserver\":2488,\"bytes_toclient\":55246,\"start\":\"2025-11-12T13:47:57.902538+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T13:48:08Z","timestamp":1762955288,"ip_dst":{"addr":"172.18.0.4","port":54470,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2025-11-12T13:48:08.220108+0000\",\"flow_id\":407680712514375,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.30.49\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":54470,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"hdsector.animeproxy.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://hdsector.animeproxy.net/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2151},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":6217,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":841,\"bytes_toclient\":3271,\"start\":\"2025-11-12T13:47:57.990023+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da79d850401c224f0fd7e453ed23adb9","sha1":"80c2481edfa6a1cd637969941c89d075a1a0a145","sha256":"5df46098e35b49512686a4e9a30a46c115945e187911c06a326705ff2e2d69e3","sha512":"4c58678a5a7be33a09bb880472f671658efb23ef05b4222d73e227e77e495864b5730f51bf3ea909b1fedda556e08462a9c32511d91370035b90e27a1baa172c","ssdeep":"3:N/BKL1X7td4Wc:eL1zbc","tlshash":"ae5504c07c5730701450cd40d154141750054c01501dd401705d07d417300010011f41","size":1337359,"data":"","first_seen":"2025-11-12T13:48:42.997349Z","last_seen":"2025-11-12T13:48:42.997349Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"136fe82059c63e546542d25e2b156c69","sha1":"8e102e37bea43e6e4109b05cbb3bf422c2e1b9ff","sha256":"93febe74ea3924fd020e735c910779b2d55225e5bfed1ddfa4abc56616ec3e55","sha512":"3627c42557334e012b245d99571f69b9de4d5a3404378f2fc6b928684bdf672a39739c83e92a8a841a8f89cbee35d19930cd98f64fb8b0f7f0ec8f8aae11c80d","ssdeep":"3:N/BKL1X7tdkW:eL1zkW","tlshash":"c85500c0b88330b008a0cc88e2b0282ba00a8c02a03e8c02f0ae0be82f300020022f80","size":1337359,"data":"","first_seen":"2025-11-12T13:48:42.998797Z","last_seen":"2025-11-12T13:48:42.998797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/app/apx19.js","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2344c3f05f624d595f6fb920e4d74ded","sha1":"eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1","sha256":"3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a","sha512":"b1660b062c77332a119e159c5c69d3f75d375915a33f141503232f424c4fdd990998a883c271efb94e8eb909f7837d235354ecae15b58fc23ab9d1908170e831","ssdeep":"192:yfBLCNsvzXnQQuWYQVN6nYaRB5c5FM/MR6Adpf04u7w2Br:4gNYXnrYtBONxpf05r","tlshash":"62126cc87ac7f00b53ed8a53ae1a66b8117b946362a47907d3bcf6cd15e920bc179cc4","size":9183,"data":"","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-08-02T03:17:50.466458Z","times_seen":3606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ac708676e3831b3ef8a5a8f72e55f2","sha1":"0cda8e737e1adc4cb8372f2545b1eec4e1c3981a","sha256":"489b823dbed6d6dcb1187800b21a25ac42113441bdfa02814af1201064d1e6de","sha512":"da02a44a907284f0c82bf4addb28e60716539ffb897e19dee72a9ab13aa2ac0e43bc432f8aec8cc52d95daed4ede8d83279b6c66aac0382eb827c5d8e0682402","ssdeep":"3:N/BKL1X7tSt:eL1W","tlshash":"7f5504c0754330740454cc00d1503417704d4c05741d440170dd07d437300000011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.00029Z","last_seen":"2025-11-12T13:48:43.00029Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9b1b1f82bd03b0f856bd62d896d3264","sha1":"61e589cad7e2ed6c1d0a6236e0380651e5b6d1e4","sha256":"e30b2b49318d4bbd852f36807f1c9cd68abf63fbf3b9911ee736edcb09a9e079","sha512":"dad112e78c61835ca91b1185934844db755c2817f2e491f1a68ffc5645c9aa4116ff15c8743bedeb899d7a49a4bf4d88579441975355c6942a24ba7bd368a45e","ssdeep":"3:N/BKL1X7td9n:eL1z9n","tlshash":"675504c0f44330700554cc41d150141750054c01501d4401715d07d457300000011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.002088Z","last_seen":"2025-11-12T13:48:43.002088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"884b620ab8fe20fc8ad46b3c649ce1b4","sha1":"bf5b5f7f5601c20c4bbf6d5750d9034aab1b7145","sha256":"7727cffd0b88804aeb1117e2182aaec75ba790444ea3751977c963798331fbf5","sha512":"2ffeb3fd2744f9ccce850bd6b0d3e587f8768c4d1024cd8abb7903bdb1200d1989a6c91b2c02482f0f110207eee195e7662174a0031a67da881ad365ced61687","ssdeep":"3:N/BKL1X7tdBXVn:eL1zBXV","tlshash":"7a5504c0744330700450ccc1d15014175c0d4d01501d4501705d07d517310000011f50","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.003661Z","last_seen":"2025-11-12T13:48:43.003661Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e32a898dac787b8c2f6a23ff572bcf0a","sha1":"a74d8d36270d0aa5e6c2601273661e791fb1cd84","sha256":"e64251bf649622c393ef121144f1f03c4890c6624af25bbffe675aa66d17882a","sha512":"2f806de5fed97a3784b33143e2f5343a9e4f6f6059674c4738fabf6f2f3f614d4973c57e2205aadbe001d18c8808ad933ed56e8a9d68d1cf4c7c4a223f60a44b","ssdeep":"3:N/BKL1X7td0V:eL1z0V","tlshash":"845504c0754330700c50cc40d150141755054d01501dc401705f07d537310100111f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.005403Z","last_seen":"2025-11-12T13:48:43.005403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/93954b626b88/api.js?onload=cwlZd3\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9d82640b55b86321c027701e0ceb0cd","sha1":"80c36def1db4274f5dd45171c3e707de83797e72","sha256":"6cadddf1717be85c3467494943718b22cc3b75cfdfc4b972d5fdafc0a659f529","sha512":"3b7fca2af25c467c952ace012edceeaed7514287ef2f61e8521929f26a1fe73cd524df190650a1620d4736d9c37226d0de278e2a4f9312c2728cc2c9325227a6","ssdeep":"768:/C6j02IMgj8LUU6FObbgFZsuAz7Ww5jMSmLLNY1d9V9tGcpfBgQf3MVuY8t:42Jgj8LUU6FKXuS7Xm2Dt","tlshash":"89232a583256797226d980e1a17b63437326753ae94ccc50e423d836367cecad233fba","size":49559,"data":"","first_seen":"2025-11-12T10:24:47.538879Z","last_seen":"2025-11-22T14:46:39.317283Z","times_seen":5703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dedd352338543b137f608adc8d0d4aa8","sha1":"100edb4e8fef9b6da043d51135077e68d2a61b22","sha256":"b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48","sha512":"e2fab4d95d5baa013a7c248945156524478341282dcffc462fb2de318f55ba29dcafba0db3abcfb6399c6164f6f630f06d48a7323b73f8ea05d5978cd60a4c5c","ssdeep":"192:ATn+ip4qxJ/gzuvu3fo8idwqnOqgStYc1qRP44+PHlCXXZE7904AxF:YbRJYz3oe+3tYGGx+NGXZCAn","tlshash":"2b22b5c9b2d2f06443d77161942f2007f23b2869b54dc498eb66e8d3bcb045ea227f79","size":10178,"data":"","first_seen":"2024-01-26T05:18:07Z","last_seen":"2025-12-29T12:17:25.567723Z","times_seen":3656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0777d21c374ffc4f9676ca1ff556a451","sha1":"ed8f5d5c3f1fea36fed73130f0a7bf86c6e402f1","sha256":"f14a0d9a871bd227ffcfccebe71df45ccd2f9b3d49ffd6cf57088abbabb81b81","sha512":"896da307c9b093611eae161316e16b4bb1befbed3781374f35c709a649d6a54f1ec42c21524c53f14d2728d4724d631910121b37ec4108314fda12609555a218","ssdeep":"","tlshash":"5bf0e1fa3f9060348559f1b4e15baa18b47164146001680a84cd84cca8d0ead4e6d59c","size":551,"data":"","first_seen":"2023-03-08T02:45:35Z","last_seen":"2026-04-01T13:05:07.394045Z","times_seen":306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/?__cf_chl_rt_tk=D6k3AIw4O8V6nvuP8b6_9whyd_YG4XTyAzvGH1GB5cQ-1762955277-1.0.1.1-EVhrRCJd9N2yN_PTLkvOjXrKTiCxoUFTZqIka.O1VAI","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4bcb1c7ce8ca4fefc12d86ec72bf8c68","sha1":"c14f13075753be8f1f1661fc8b37dbcfc6ea824a","sha256":"323bf6936048252d7259b87c4f3623eede88ef2b25fd70fdded30fca753cc545","sha512":"b18a7931a5a3034dd83b7c5553535231f4057dd8f5253e8e846aa5e31730f1c58422ac92578ee99e9dbdaf9c71e8385c623c2cfb24c80d0fa6c6500bc59f1b8e","ssdeep":"3:N/BKL1X7tSXPn:eL1UP","tlshash":"515504c0f54130704450cc00d1503557d0055c01701d5401705d07dc37300410011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.007934Z","last_seen":"2025-11-12T13:48:43.007934Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6592f1e134d933836e83b825dc493d4b","sha1":"10b997df4a86e0ec9058630494531b01d2dc8e87","sha256":"aecae36c53c6ebd8528f15d4499ef1aa448f304c74775276e005fcb9ad901077","sha512":"1bcaadb41a0c204786e15597f54c6b22b0a5a2a34b9be231271752923663b9389b7e5c68976f18bc1e8ae32dcb4467b87f1d807bd8d52b694da3401a478d83b8","ssdeep":"3:N/BKL1X7tSSTR:eL11R","tlshash":"795504c0754130700450cc00d170141750055c05505d5401705d07dc37300010011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.009446Z","last_seen":"2025-11-12T13:48:43.009446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9a4acae2f1af3dcf682777ebd5232a87","sha1":"4a75b59c98e731eedc9f7a9abeb7016efa2a2fef","sha256":"619ad4411be7a7495f4ab4e419d2afe4ebe23ada5a378e73761fcd20d22ce007","sha512":"b40870e3a909fe6577d91e5f34159fd06002ab88a997d7c54cd9fd02b06d4db6ed554233a847e8e19b211a7ad5fc2030f0981f7482e0b6d33dbf208b3af4aed7","ssdeep":"3:N/BKL1X7td4Td:eL1zC","tlshash":"bb5504c07447307014d0cdc0d15414175005cc01501d4411705f17d417300010011f41","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.010836Z","last_seen":"2025-11-12T13:48:43.010836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"00449727df58caa2caa31daf7396cb58","sha1":"98b20d090f153d50882d2af0a9dc81f4b5634d64","sha256":"0ffae000b2dd808db5cfe882b64d5b8b321ae358c2fc1b4f5753c0ba884d45ce","sha512":"42ed436035ed509def95be776f917ecebee37c0718212b838cf28583a1cd6745f8dffba4b46f7bc5bbbd50f4c7bcb0ff9a069512a6586583e907fe46885e2200","ssdeep":"3:N/BKL1X7td6c:eL1z6c","tlshash":"a55504c0f443307414d0cc41d155141750054c01505d4401705d07d4d7300000011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.012096Z","last_seen":"2025-11-12T13:48:43.012096Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a84cad3fd912d34c7b830d459f5f09e3","sha1":"f034a75cbdbadda314d7e9ff8803719cda8ca617","sha256":"1c34b8a22cf98e43936b851007db9e9ab3ede026e4cd0b28e09abdd65048bf23","sha512":"942bbd74bfbb2077a184936e95cef41d685aaa5fbe54f246ec32bd7095301213062b624107a3e2b06efc2b0d41e311a0baf395b5061b62aa26aa8b5bf3920657","ssdeep":"3:N/BKL1X7td9L:eL1z9L","tlshash":"545504c0744330700550cc40d150141751054c01501d4401705d07d41f304034011f41","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.013296Z","last_seen":"2025-11-12T13:48:43.013296Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3452d4db86f132bafa716a4d627d05f8","sha1":"fe8f0e41fe35cb30447a2d1633dfbb72db4bf940","sha256":"cfb0db49e1cf178db0f1e1d53c3e75f89fe6de25590612213bbdc7dad07eeb4b","sha512":"ab85cdc06b5285dfbe4ef713bffce68f91cda18fdde8779a3fe106e409cb36aac9cebb17cb46cacdcb5ca1af4d3f27c00cb55f8537fd0bda15b386601a025a3d","ssdeep":"3:N/BKL1X7td1H:eL1z1H","tlshash":"335500c0b88330b208a0cc80e2a0382ba00a8c02a82e8802b0ef0be82b300000022fc0","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.014613Z","last_seen":"2025-11-12T13:48:43.014613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a0c90d1e3c16a2887aa432251bae3824","sha1":"51691f5b3af787bca7ec6afea0fc9ea398c36dd8","sha256":"2ec261953a9990701c9834c2d58b66b118fe655029e9610d40d6b2ff51f44ab9","sha512":"d7a9f7c843f54666345f30ef6880b315579aa08f3c84c2dd603041fb2f4a1c64fe73b9708039ac364fe40ba29b28bd76f58d57c481e706c42ae2bf16a41b2e4c","ssdeep":"3:N/BKL1X7tdWn:eL1zWn","tlshash":"155500c0b88330b008a0cc82e2b0282ba00e8e02a02e8802f0af0be82b300800822f80","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.015777Z","last_seen":"2025-11-12T13:48:43.015777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"origunix.com","domain":"origunix.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4fd6397b10863572e51a4e40be260f2","sha1":"3e7d5eec258d9990931457ad079e9da63f1fa248","sha256":"8ecec639fc30f49f52fb892451e79e811233ba707a5118eec6f89597b0d01777","sha512":"cc89e655d435c6b74c8bf3e8117672fbc34f084beafdb8906c6e7b347eb02b16cfe9cc9ca5d6784b4a2a5ce691adba8c3f7921bf815ae043ab7ae4bd4cb24461","ssdeep":"768:hCflSCRC850RCX+4D+R8WyX+86wA6C8Cflqu4sTJ+zaXeXgtA9zk4sTJ+HXJpZ63:qvV50gPowAzqfTqx9","tlshash":"df53d698b5d2f1a102c370b8543f6106b2366929248dc098f7b5ded5ad78d6ea633f3c","size":64157,"data":"","first_seen":"2025-11-12T13:48:42.952628Z","last_seen":"2025-11-12T13:48:42.952628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3d2073b23ef201b3683eb8b64432420f","sha1":"2c33b06637f8ab2eb5ecb3c7d2d888b63c384bb3","sha256":"d1b65c5a60a7998611586485b754a8b1f0e36268ec8542a022fea7326db95d3e","sha512":"a5e68cc00691b503c08432fab88bb47a72cd952c91b4c9595bfd973a7f7ac6092d47a6f5c6e2d4bd462b4dec00c7d9901cd52842901e4a59102886ea858d424b","ssdeep":"3:N/BKL1X7tdRRT:eL1zRRT","tlshash":"c15504c0744330701450cc40d150345750055c01505d4c41705d07dc1f300010011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.017396Z","last_seen":"2025-11-12T13:48:43.017396Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2026-07-07T20:05:43.09583Z","times_seen":15231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ec4ea2cc07fb4298dd793cbc67d3755","sha1":"04c34c92ef5baad58af7c56b728d4a84c55f7185","sha256":"9a0e8ee9789c9f554b318f332bf0d2c61f85cdcf33afc1228b6f94181f841b1d","sha512":"30304737e90f692141d3d9d94011b08bd5605aa54d85f9808fb80fb3fae2b0c1d8151784f56ab2bbd89729e5cbc7aef8f6f3b00acae27ae268a8718a5d3ceba0","ssdeep":"","tlshash":"e1f0dc20a9ce2dff820650ba9c78cd0a71a7381ec1f0c0070e00d83563b1fc909582c8","size":449,"data":"","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-05-22T22:37:39.400616Z","times_seen":2074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2026-07-07T20:05:43.09583Z","times_seen":15231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9582775ef596a076859c6c12edce9f91","sha1":"547c11fcd28f39b82a5e492b7f32c13af874d9ff","sha256":"0ede9f165ede17f306b3616dce5bcdfad16044cc51c3eb5efaaefd46f87f8b5e","sha512":"66aab322370aaf5aaee46630f3f9729585548d74b540847280a9acbdc3e33930728529697309fdd763723706a8d7ace1d305938ca7dd40b8ad290e1cd391c8eb","ssdeep":"192:ltgNpZ0XfCYC/KHBzlKbpczgO+vBP7gHBEO9Dm/:luYC4opczg3vN7gHOO9DK","tlshash":"8022e7cbbfc4b56102307da2247b3ec9544bcdb9804add99d264a9f4793135da40eeac","size":10048,"data":"","first_seen":"2025-11-12T13:48:42.973296Z","last_seen":"2025-11-12T14:12:48.781383Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5a9f70260d67cf075b345890cce27823","sha1":"42c9cb7a467f98e1cd44b571bb451ad000fd54f4","sha256":"4340211bca6fde64e3b661b8676b395f59699d3d69d9fdff511bd3f914cceb33","sha512":"79b6a73b8d8321f3334e99703fa176b77fd76ce9a16a926927011696aad688ff4b892f441fb7c5ef2aef43eb20ca1f15222db25687c4a9eb48674db7a7d9d3b7","ssdeep":"3:N/BKL1X7td0:eL1z0","tlshash":"d65504c0744330700450cc40d550143750074d41515d4441705d07d417300401051f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.0201Z","last_seen":"2025-11-12T13:48:43.0201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7945376805ba4467f219c22c89f6404f","sha1":"03c2c173e5daeae89c860dfd8e10dba7b55e5a85","sha256":"813ec1d99a64e570a27bcd15681cf40569ac9064ce31881e970e794841aba7f9","sha512":"8a06d2d9692bede97c807c1274f7c370265958aa92c3c27ae4732c5280a9d98e29f10dc4a71d626667e65d5bd9ca805b561b5b2783dc3494c37e0ead5c29ea5a","ssdeep":"3:N/BKL1X7tS/:eL1M","tlshash":"205500c0be8330b008a0cc08e2b0282bb00a8c02a0ae8802b0ae0be83b302000222f80","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.021569Z","last_seen":"2025-11-12T13:48:43.021569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a76b69e16847a41c9d52ce40f0566a8","sha1":"fd220da5d58bcc0b035c44e8dbfbb54985e217c4","sha256":"94c96c6cf15180d477da1c700fd13dc24fe415a8599e127c716507895dfc7ca5","sha512":"9e3793ad808f5ead11b2b5f853cd9069b70f1d317a3e4f53490336c91deb622b512bbfca969e224fddaae49870cc05dbcb980bc13abecf429b34e67975cea08a","ssdeep":"3:N/BKL1X7tdMn:eL1zY","tlshash":"b75500c0b88330ba08a0ccc0e2e0282ba00a8c02a02f8882b0af0be82b320000022f80","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.023533Z","last_seen":"2025-11-12T13:48:43.023533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad94bd5ebcc79cdead724ed469aff221","sha1":"988f6e87aaded68b594ab4343bdd847621162c1f","sha256":"3bfb85d39904eb666828230425b718f7384e1d6de784569fa0b6c636e6e2d1e5","sha512":"fc2d1275bf0d1fa1257f7be3376a9b179172ff906cf0d0f4bbddc08cf10931a984d39158b623fccdf4a0f9998727f3db40ec672a0e9531d3e904e03d768746d3","ssdeep":"3:N/BKL1X7tdbg:eL1zbg","tlshash":"445500c0b88330b008a0cc80e2a0e82ba00a8e02a02e8c0ab0ae0be82f300020022f80","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.025286Z","last_seen":"2025-11-12T13:48:43.025286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddb38cec2a3e44027f210856f6c3ab06","sha1":"8dcbb5f9a59c7d2c12441b2d46e47194281e3fd7","sha256":"145bcde519f7316cb23a753d5147be17044a81c66d3e2062610f49738914a969","sha512":"bbf3d3201d294b0a4ac92e1619eaed9bd6764a0da32712ff7dc7837d043795c4704108ca013e794ec4a536facba30be2dfd6a0872d20d5708a2d6c8e2f9f516d","ssdeep":"","tlshash":"ebc022b564a490300424009a707beaa83c31318874926080c48d781ca924fd30452ca8","size":187,"data":"","first_seen":"2025-09-24T02:22:33.853601Z","last_seen":"2025-11-12T14:46:36.801298Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2026-07-07T20:05:43.09583Z","times_seen":15231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bbd21a8d2011f652f0683140025ba07","sha1":"a1676ad0d15f950bcf8d52002496ecf65624db61","sha256":"a2cdc472b4750892028825f573308284d625c2c12937ed4d36f1bfbdc9971167","sha512":"7d323284e558acdf3a799e102505010f42228d5699c2b7568aabe2baed25db9f317071a69260c1ff4bc4fc1be3655ee2a2f2e675a05ca363b69be94269bca85d","ssdeep":"3072:e2+gQaEJ1hvWwmUNYj0S0BE33BvHxB+E8v:3+DdhvWwmUiYS0C3xvHGZ","tlshash":"50b319da22666459126f402405abec0d75ae8c81048dcd78f0e5fc762d78f26e3f7be9","size":110117,"data":"","first_seen":"2025-11-12T13:03:38.990374Z","last_seen":"2025-11-13T13:46:52.813691Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2a2ba26f634b8c2f44ba5cbca01c2ad8","sha1":"fa3abf9464ae727b8681a691a7bcbadb2a51f487","sha256":"3189a759133f936c5a000cd27d5cdb0f9da7e87cdd59a35277f2cee050125d72","sha512":"4c0540d9b05c4c4e38f3d151ea544317b5850a800c9e1c5344469c60a475df09721f468391be068953910eca0770b54dac651b727c6736375874597c719b70c8","ssdeep":"3:N/BKL1X7td0Sn:eL1zZn","tlshash":"e25504d0744770710450cd40d150151f50055c01541d4401705d07d417300000011fc4","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.027859Z","last_seen":"2025-11-12T13:48:43.027859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"acae52e736740797998d501599857a80","sha1":"770bef5c8a179ac07798d5166a94c626751a3cc4","sha256":"f9046f018f134afb5c751f3475e3c693fb92747964da390d7226f039e39c7faa","sha512":"9ffe2b46d5e0fc7dc91ed0d62f4907e02cdbb9c304c2245d6e177f79104197178705687730130bfb4bd5606e1ddf20c41da9acfd93cc0878ce2640ac76950261","ssdeep":"3:N/BKL1X7tdKT:eL1zKT","tlshash":"d25500c0b88330b808a8cc80f2b02c2fa00a8c02a02ec802f0ae0be82b300002022f80","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.030075Z","last_seen":"2025-11-12T13:48:43.030075Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2c244739d5c1e63b7260708d6ce0fa4","sha1":"dc7872c151b930cd530a2fbad704dffdd4df3590","sha256":"89542c38305a127f01aafe0ff0f28a218353d7f8cbd3fb96d5fea11bee7ba843","sha512":"3e40d0013ca296f272c071e5b4afd131d5f64b8bcfee0c3f6469b7acd104bea80e78ed25d8ec8f5ad1f5ac94e830f94cf8dc2f630f1a90a8fe0ec9c54fcce3c2","ssdeep":"3:N/BKL1X7tdRN:eL1zRN","tlshash":"5b5504c0744330700c50cc40d150141750054d01505d4c01705d47d5173000140d1f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.032807Z","last_seen":"2025-11-12T13:48:43.032807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2026-07-07T20:05:43.09583Z","times_seen":15231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"kettledroopingcontinuation.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","size":6461,"data":"","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-09-02T16:10:02.170015Z","times_seen":13546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"849ecdcbbbf6bfdddfd141f24eab6483","sha1":"4709d86c58869b2de9bdbacb374717d50af1819c","sha256":"e2f5357c11144ad83f7bb678794df180fed5667576c16b26811cf856819c4162","sha512":"8e4e06e9af379e06845b5c6bba717ba2c57b9b7a9cf32689aa5b6aecbe51f70c3950b7e3ff786de2c49e83ddd1c3cfb43e4e676e635d4ad1bd2cdce8ea5fb007","ssdeep":"3:N/BKL1X7tSwT:eL1J","tlshash":"6d5500c0ba8b30b008a0cc00f2a0282bb20a8c02a02e8822b0ae0be83b300000022f88","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.035023Z","last_seen":"2025-11-12T13:48:43.035023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef514a35cec5d236f7b822147cd77d83","sha1":"64bcad768932288e2d99a6c3380a7290a3eb39c4","sha256":"9e79d7a1fbd255d99d50f9421e846204164bb292b9f5c078c6f961c3ebea097f","sha512":"468b0251fc3d3abb5f9edf03b24401927e5d5fabbace72a1d462d3ff793ca09ddc398dc941861992f9d869343c4505a5f6edee2f12c42dd24ed203138d11bbd0","ssdeep":"3:N/BKL1X7td3Qn:eL1zg","tlshash":"b85504c0744770700450cd40d1f0141750054c01511d4c01f05d17d417700000011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.037511Z","last_seen":"2025-11-12T13:48:43.037511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f38ef01fe6ec0ab6f98c7e230263f3d","sha1":"57eb0c3c2109506252779f5c8564359471b87ce2","sha256":"907f16c35203e2ba658fb8b59261ab97f06a1e5619322a513b8c1312d624447d","sha512":"ef76c0a5f6c85a82e36e7e5aa1d9f34bf95ec4819190c81154acbca750cfcbac55be6360e7b6715b7de2712c9b15510c308313be16fcd97d6003272df5ee3462","ssdeep":"","tlshash":"6d119c7a7b2a6634d685418b317ee7a93e7260617a02d044c2accc295d18e8714afcbe","size":921,"data":"","first_seen":"2025-11-12T13:48:43.039814Z","last_seen":"2025-11-12T13:48:43.039814Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-09-02T16:10:02.170015Z","times_seen":13546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=99d67bf60c6c0afa","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afbd43265dc117963364e3bd17e72e01","sha1":"ae65176f9749e5d70c00ad0bfcdee650c1e938fa","sha256":"12ce58451af596c38282bf892b425eb11ecb8bdf4057523a8be5723f03a93568","sha512":"c5d514126b61054382c7a9906857fb23fbe9eb3f741c2e3b2bb961dddcfe6b00f9f4dff32e3399b35ab012589c6f44c5a06d2fa411b9df9ef5d90ef44224fc36","ssdeep":"1536:iZz0ddDJWnRuJW87O9+PkKYqihNx03Nh0jJkGLzzz0Gq:iR0n5JWd1KYPNKrgzzz0r","tlshash":"84c3c58d75ca7445023398b5056775dba2ba7c4c301c9c4cfa61a8e93cbe358b763eb8","size":122224,"data":"","first_seen":"2025-11-12T13:48:42.947794Z","last_seen":"2025-11-12T13:48:42.947794Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"748fce8f4272c239c6683f9ed84a6f18","sha1":"dbdde81c5868b772e1239b485a50f846435f3e4f","sha256":"1b013cc8dbdd2c7ab19760340d524da72959a25cac2b3df13c914e957f041442","sha512":"96c277add3143d1cbfc2e72e71d78c8e7efe7f001c725ae112a5c9c4cbd8c69408126ed86f4ab41dd03c4ab48af05b0a849c66c825c40517dd9c1776ced7e0f8","ssdeep":"3:N/BKL1X7tdxW:eL1zxW","tlshash":"255504d074c330710450cc40d150141751054c015c1dc405705d07d43f300000011fc0","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.04208Z","last_seen":"2025-11-12T13:48:43.04208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2c9955bc16960e9bf4236a5e043ce38","sha1":"e49b58082ffbac5319505c9e9335703394649719","sha256":"4a33e75b4c8913d55b38989ca46e919396ea37d9e50c773f4524c2325208258d","sha512":"9d7e0ffb4966fd61020c33ee0b80d4d5b295c970288083b09e7d505acb5bede903e335876dd302682e1bc26529042452ff450e9824869fde270817a42d72fce7","ssdeep":"3:N/BKL1X7tdTdXn:eL1zTdX","tlshash":"4e5504c1744370700450cc40d150141750055c0351fd4441705d07dd17300000011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.044356Z","last_seen":"2025-11-12T13:48:43.044356Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"kettledroopingcontinuation.com/1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","size":6461,"data":"","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"29cbcfeb66a5e43ea96fe54d1a2b54b8","sha1":"0b5567ebdac29f9f8f1634d927ad9e0fe0043dd2","sha256":"d760c86843e6de6dfb9db3040ed242cb9dc27d742935d668f14e0faa6a3f7184","sha512":"dc4749ef4c9b980db04f227ea656ec23dc0070dcb1293e64fc2eb3a764df2535eed826fb1fbc16bcd46bace8b7dcc8517b2f13901785dba4e6d0a56f32b38f0a","ssdeep":"3:N/BKL1X7tdhn:eL1zhn","tlshash":"ab5504c0744330700454cc40d150141750054d01d01dc413705d07d417301100011f41","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.046293Z","last_seen":"2025-11-12T13:48:43.046293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cordbraghare.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20694a42d41f4e85ebc87747c57e9480","sha1":"9f26ce0cfa093e21d626982c660c09715c6988f3","sha256":"bf4c69faaaf9e92e4dbc8d438db30a3bc58eea6242296ad3e779e3a1a04e5d46","sha512":"ba1a07ad494f29ad8cd5253ea9c68a94272d26cadfd04999ca6ae014b1b2358f380d5eceb726c3747bebb06acf075aa13de2a10fa0968fb4e5aba9c92a5cbcb1","ssdeep":"1536:fMfD73s72DQsjQlZKEMO2N6BLFYQPNT41FXgKkGCWUMZL:foDxkN4O2N6BLFYQWDXgKsWUM9","tlshash":"e283f8883f81b65812a2f133723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","size":85012,"data":"","first_seen":"2025-11-11T10:35:31.370101Z","last_seen":"2025-11-17T12:13:48.263101Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-09-02T16:10:02.170015Z","times_seen":13546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c69f07c5611fd967d30080ed8d10c9ac","sha1":"71678535a3462120b2e9dbca969c76645dd25a10","sha256":"a987bcca411e4b8d9989d2484e5756a131a3cc55507c2b941b70d512e0c3ee64","sha512":"03eaa5bb55d996a6419a689729d81a004b56dfea5208e89e73d7044ae3e70a572ea7f1683cddb1f56babd373e0580cfead20d85b414499f2360172a07b7b9271","ssdeep":"1536:dMPD73s72DQsjQlZKEMO2N6BLFYQPTT41JXgKkGCWUMZL:dEDxkN4O2N6BLFYQ4zXgKsWUM9","tlshash":"8d83f8883f81b65812a2f033723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","size":85034,"data":"","first_seen":"2025-10-26T06:20:23.426208Z","last_seen":"2025-11-17T08:45:52.37026Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e2684daa3f1a83b2cf34927c98fa1c5","sha1":"b0873a1595873940420e0aa6c067e89478951ef8","sha256":"c194850f6f9943b4eee636435b2859a21c42ff589825aed6f2ac0b65a9ac5516","sha512":"e1ee5c3b406ec0e29346a9045f00f88bc6e35fc8317d0458cb0868b0202211b33b05c5afeac9c167caf3783eaf5b097d7144bda222b2855a5ee96ba573a4c1d6","ssdeep":"1536:rUzlOhin2QVUIQCb6ycGOZ9bTFzfVZI/ry728Z35TEqNVQtVR1eg6eoX/vqRaQ+/:YxOhi20iPBd9dZdDQ510nqh2fOerKm9","tlshash":"cee3f98a75c97886423754b8003764e7b2ef6ccd30189c1cf914bce27cb675d66a6ee8","size":147556,"data":"","first_seen":"2025-11-12T13:48:43.048056Z","last_seen":"2025-11-12T13:48:43.048056Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4c508f5bf95fbc331735f160f8d78443","sha1":"02dad464a7cb779d1bd6cd93098b7bf949517ab9","sha256":"bbcba488b2bf0e0b90bae81e2e03b7ba4fae1ac8bed15bbfbb4681ed14745da1","sha512":"603abf3d7920d80fcd3b27d8c690e257f9599a95ef4fbf888c6db5a7f22c62c45959083417ef8d344b506c69f324ecdce6c48c1cbe54845758ff5e0979b6434e","ssdeep":"3:N/BKL1X7td4:eL1z4","tlshash":"b85504c0744330700451cc44d55034175005cd43501d4401705d07d517300000011f44","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.050008Z","last_seen":"2025-11-12T13:48:43.050008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"heartilyscales.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"592d58dfe567c82ba8bc43574216d677","sha1":"06cee5443503c8ffa12eb703b17688546cc8fc50","sha256":"6ab5201058835d80adf1cd70096e86e2281472a04fecdd458603247207cf0a7d","sha512":"2b537343e570f83feb23d7098d58c887b2fee2de06644f1a0c3dafcfcc99f8336156f9d5035c479a2fe71cee616ec685d3b8e0f4dc6a7459f617256458b81661","ssdeep":"1536:fMmg73s72DQsjQlZKEMO2N6BLFYQPNT41FXgKkGCWUMZL:fNgxkN4O2N6BLFYQWDXgKsWUM9","tlshash":"5483f8883f81b65812a2f133723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","size":84996,"data":"","first_seen":"2025-10-25T19:37:09.666619Z","last_seen":"2025-11-17T11:06:55.662455Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfcccc1b0897920b248606630f9408a9","sha1":"4afac239330405a84f7c4eb19c615228a91ffc6f","sha256":"175b76b258dca52064b4d4ea46acb1d8b56c5f491e84be8f2923cbda3c2229b1","sha512":"fb85d423fb2feb20534a3be3bdc7019644782445f79c5adb311c8e2095a9e73e2e87dd063d20171b90fb756d5ad9334032e94bdbd02e4aaa9955c199564ee577","ssdeep":"","tlshash":"68d097aa29358a30a388010b20b3e39822a174607b22d90080c9cc1b1f10fc394a2898","size":236,"data":"","first_seen":"2025-11-12T13:48:43.051558Z","last_seen":"2025-11-12T13:48:43.051558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77016e2df15139c4aeb5b5bbd1ed02e5","sha1":"655ebef03d9de8157179f40e29b5acdeaedd2ee1","sha256":"797e3ce7b2e8bba97bc3c2180cd218fef3e35aa3f26974e40bfc6aaf0c00db82","sha512":"6d5efbd42f106bb3d423da1b31c6f882e4399afefa26311aaf3e9fc067c8c68073bbd904564d6a2c683f5bfcea3d1d649a6be770c92ea45d02f0157faac961c3","ssdeep":"3:N/BKL1X7tSSURn:eL1Cn","tlshash":"d75504c0f54130700450cc00d170151750155c03505d5501705d07dc37300010011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.053123Z","last_seen":"2025-11-12T13:48:43.053123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a60691ba76433b8b6878c92d3d10e7d","sha1":"38a02a573f5225cc9520fe1394e309afc9da4b5c","sha256":"d8b8243100b73340911e3b0644cbbfecf74da7c1fb528b1469a1a542d6226641","sha512":"135c92e0da8b36f7f644dbd57b658f763abcfb8126dd326a0f34bd2698affbdbf6ade47ed6ee56c89d3c89577deaeee8cce83b7a6a781a1da8c12584ad988199","ssdeep":"3:N/BKL1X7tdzkn:eL1zzkn","tlshash":"ed5504c0744330710454cc40d150543754054c01541d4401f05d07d417300100011fc1","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.054769Z","last_seen":"2025-11-12T13:48:43.054769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aebf45d9bd00b8fd8d30ebeb0485e3cf","sha1":"ad97adea264ca2bbeb7a4af8bba221946eba67ca","sha256":"15cf3fe25e23419667704552799096bd07379951e69eb5113ff21aaea69c260e","sha512":"62c1d5001b45bc98160a5099d3a7d552bced1d7a4581b8783c6fef9057111436f2efec095962c7023d2b57e705506b8599490571b3a2afed6a000b67465766f6","ssdeep":"3:N/BKL1X7td6n:eL1z6","tlshash":"f55504c0744330700450ccc4d1d0141770154c01501dc505705f07f417300100011f40","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.05625Z","last_seen":"2025-11-12T13:48:43.05625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cordbraghare.com/22/00/54/2200540f09f939738419313a1a090c32.js","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bc4a1f0cf3387ae19fdf7043322beb5","sha1":"65a7bc5460c5fd79a4c511165c08b7f6f61fa8d0","sha256":"1270345b75403c7188f02cdba8c39fb1261a1f8b2767f7f162ae59b4a8f06dac","sha512":"7f2b7f189066e66d6060925fd8aeb8b427cc6f44f003d631d77f23cfab3308a9592c1ac562f066358ad2eaba10b2c3faa4cfc4737c56c21e0a92f563a607f316","ssdeep":"1536:om9T0jLlKHI2HTXYao6R167ET/Dei89ZHf5nMJ6bzs1oT1LT:oRY3LKKJSee","tlshash":"40a3b6cc3f81f06d466a68b3123f800bf12e6d55908ce9dcf913e1e99eb8b5b9539524","size":106711,"data":"","first_seen":"2025-10-31T17:11:24.438989Z","last_seen":"2025-11-18T02:35:34.348098Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d3aac19f30f7d5f062f65c0f75c149e","sha1":"85a3afcf63ca5c4da320cf3219d3d62e10b36f93","sha256":"19f8bc4a4fba3cb47976661e8e52b2e5d8ec7af24d155ff9198976c610ed3d37","sha512":"2fa37a314c3f1ba575469f508018b0f4c4179fe50fb920c0b838b52f63aa370aad8607b3e40393b998444ae5c47c2a4b76a3a153099ed10f083a2722a6f19064","ssdeep":"3:N/BKL1X7tS3:eL1c","tlshash":"935500c0ba8330f028b0cc00e2e0283bb00a8c02a02e8802b0ae0be8bb300080022f80","size":1337359,"data":"","first_seen":"2025-11-12T13:48:43.057954Z","last_seen":"2025-11-12T13:48:43.057954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-09-02T16:16:45.557615Z","times_seen":829059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-09-02T16:11:16.070999Z","times_seen":1045736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"heartilyscales.com/pixel/sbe?t=3\u0026error=external-error","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:12.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 21:51:40 GMT","end":"Thu, 01 Jan 2026 21:51:39 GMT"},"fingerprint":{"sha1":"AC:0E:0A:1C:AA:E5:DB:3D:5E:08:F6:26:F1:1D:98:65:42:D8:4F:97","sha256":"24:D8:C8:0C:EB:CB:B6:51:7E:D6:F0:16:2A:4D:4C:93:AF:30:D4:E9:B0:FF:9D:5C:C7:9E:8F:A5:CE:E2:1A:E1"}}},"request":{"raw":"GET /pixel/sbe?t=3\u0026error=external-error HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: uid_id2=c906963e-befa-48de-87ab-c91ac896eaef:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; sleca286902791a7f4c98bcb1e812322cd78=[5967421]; u_pl22675059=1; sleca032b4d33c8aea68a4f9b84235614bff=[5967421]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:12 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kettledroopingcontinuation.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.812Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3422\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: afbfa96e20c3d065539ad1a8fd27cf69\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6461), with no line terminators","md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":92,"dns":1,"connect":92,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/ren.gif?sid=H4sIAAAAAAAC_1SSz2tcVRTH70u6slCxFgVBeAsXCmb6Zt6byTyLVGOtFmsa0kiQru6vN7nOm3ef974fk9kYDJTuHBeCy5fvJA3WIOpeKBMXSkBw3JhFs-l_oCCuRCYZKZ7FOefyvXDP53vu3Z38hPjI6fHK-3qg4phebtY89-V1lQhdWnd5za17Ne-Ku66SVnDF7U-TKV6r-0HNe8V9R_Kuvtzw6p5X9-rudWVkpPuXT1Wo9CCs10KvFjRq9WaAvvn_2eYOLHUgihNyEUpMnn4c3YHiYyS9b69J2810-urbvTymmTYoxP4HSTfRZYLekzYyDqJkf3Yb2k4I-XIOOtmfEUAXu1MCMDUhc889Akv2Z2OCFXtnk7IYMgET51EWY8h4DEXH4HobSvxKAC6wfAtJ7_6yNiXdPFPpVJ2Qc3_9CVVOyLlHl5D0vlmKVd-9reM8Uzqx6EcVVH8M1RkjzQ-RDRyo8hA8-xRK_EK8588j6T14Vxeq6xbSdKHE8Us89Fphy5cLTEZ0IWgLudBepGyBh3XK22FLUhmdGqWiMaidQ24d5MpBHjnIUwc9cewGXjvgdeq3olDwRS-gQSAk88J2w_NoyBeR8ynBEFk6BI-H4GYLqdlCVw1h8oewGxWscGAzgkJUKCVBaQlKSlAqgjIjKItqT8S2Yav7IrY5q89qY1b9aqSzzg7d01lHJgTUDGFEtavSj-02eDY_GkRWjPQ0UZZVI8pEtZOekGem5jof_mPRlccu9fwGC4Tv8zaVtNWmQRSydtDwm616wKIIVlVQdg7UOhioCVmc_IxUTQj57HcweggbH4KredD8RdCyAt2oMEgOhDKp0f3NGtc9CF0hzc4h23R24hPy7Gh1benh6Y7vXHgdkh-9Qc4C3FRITYWP1I8EnfjeaFWXZHdVl5Z8dyvNVE8N6HT_tzOayfkH78nNUhtx45odfvUmnwrT9mBN2uwmTYRKOpZ8vaSEkOa6NlySH27YdclWcruxlJskT2-uvHX9Ri810lqlkzGompCnxCfgakIu_n3h9G_7d78AT7dg06Orj_3TgNUELHUQT_VLPyGWR1dHf3x_bcpAWQUrj8h_TOxJv2PvoWMc0GwbSa9CYSoUcQUaD2Hz-VGWmqOrv83eYLEzYrFxdlls4s_PvLLq2G02mN9qt1syaonIF37DF2HTk2FAw1YQBk1kdqIuDV_4NwAA__8JH_JLggQAAA==","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 21:51:40 GMT","end":"Thu, 01 Jan 2026 21:51:39 GMT"},"fingerprint":{"sha1":"AC:0E:0A:1C:AA:E5:DB:3D:5E:08:F6:26:F1:1D:98:65:42:D8:4F:97","sha256":"24:D8:C8:0C:EB:CB:B6:51:7E:D6:F0:16:2A:4D:4C:93:AF:30:D4:E9:B0:FF:9D:5C:C7:9E:8F:A5:CE:E2:1A:E1"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1SSz2tcVRTH70u6slCxFgVBeAsXCmb6Zt6byTyLVGOtFmsa0kiQru6vN7nOm3ef974fk9kYDJTuHBeCy5fvJA3WIOpeKBMXSkBw3JhFs-l_oCCuRCYZKZ7FOefyvXDP53vu3Z38hPjI6fHK-3qg4phebtY89-V1lQhdWnd5za17Ne-Ku66SVnDF7U-TKV6r-0HNe8V9R_Kuvtzw6p5X9-rudWVkpPuXT1Wo9CCs10KvFjRq9WaAvvn_2eYOLHUgihNyEUpMnn4c3YHiYyS9b69J2810-urbvTymmTYoxP4HSTfRZYLekzYyDqJkf3Yb2k4I-XIOOtmfEUAXu1MCMDUhc889Akv2Z2OCFXtnk7IYMgET51EWY8h4DEXH4HobSvxKAC6wfAtJ7_6yNiXdPFPpVJ2Qc3_9CVVOyLlHl5D0vlmKVd-9reM8Uzqx6EcVVH8M1RkjzQ-RDRyo8hA8-xRK_EK8588j6T14Vxeq6xbSdKHE8Us89Fphy5cLTEZ0IWgLudBepGyBh3XK22FLUhmdGqWiMaidQ24d5MpBHjnIUwc9cewGXjvgdeq3olDwRS-gQSAk88J2w_NoyBeR8ynBEFk6BI-H4GYLqdlCVw1h8oewGxWscGAzgkJUKCVBaQlKSlAqgjIjKItqT8S2Yav7IrY5q89qY1b9aqSzzg7d01lHJgTUDGFEtavSj-02eDY_GkRWjPQ0UZZVI8pEtZOekGem5jof_mPRlccu9fwGC4Tv8zaVtNWmQRSydtDwm616wKIIVlVQdg7UOhioCVmc_IxUTQj57HcweggbH4KredD8RdCyAt2oMEgOhDKp0f3NGtc9CF0hzc4h23R24hPy7Gh1benh6Y7vXHgdkh-9Qc4C3FRITYWP1I8EnfjeaFWXZHdVl5Z8dyvNVE8N6HT_tzOayfkH78nNUhtx45odfvUmnwrT9mBN2uwmTYRKOpZ8vaSEkOa6NlySH27YdclWcruxlJskT2-uvHX9Ri810lqlkzGompCnxCfgakIu_n3h9G_7d78AT7dg06Orj_3TgNUELHUQT_VLPyGWR1dHf3x_bcpAWQUrj8h_TOxJv2PvoWMc0GwbSa9CYSoUcQUaD2Hz-VGWmqOrv83eYLEzYrFxdlls4s_PvLLq2G02mN9qt1syaonIF37DF2HTk2FAw1YQBk1kdqIuDV_4NwAA__8JH_JLggQAAA== HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: uid_id2=c906963e-befa-48de-87ab-c91ac896eaef:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; sleca286902791a7f4c98bcb1e812322cd78=[5967421]; u_pl22675059=1; sleca032b4d33c8aea68a4f9b84235614bff=[5967421]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a5a46d13c8e1c638ca800e2cec9f296d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.762Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ipDaS%2BuzSK1oBPIh2hPxhpYITdiEjFB3Nnk8WiG1sacjI2PGVuTYCB9Fe2CVvs2cRQNtxH%2FrlvC4Z2LokNQYqbx4Zk4IH8B61vac%2FPmSrqY%3D\"}]}\r\nCF-RAY: 99d67c4d7e725a0f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/themes/default/theme.css","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.395Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/default/theme.css HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rxiCMfpSrJDw0AnA4sxsqL6usTmc7hrLmWR46BDNbFoC%2BekNGMX4krFkKazcPNpJunH329YGMoZ1hlBFxINMUXxiOugICSUBgc%2FiWGCL7UQ2f0X0m5nr%2BuUZ5%2BwLlVU3zNuhoiLOqqZKXA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 99d67c3e9feb76ef-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1505\u0026min_rtt=493\u0026rtt_var=1680\u0026sent=75\u0026recv=54\u0026lost=0\u0026retrans=0\u0026sent_bytes=81706\u0026recv_bytes=13122\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20767,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (864), with CRLF line terminators","md5":"ff005e6ac7b68278c227b0f8ee897856","sha1":"83b4695dccccf3358a8279e11f679764de68595c","sha256":"dc595cc4d806e2a615d1cccbe532fbcfa6aa7b851ab45b3d5aa9cba9302219c6","sha512":"ead7357788c511d21cfb1324f24ad12e50cd09348c26306a8d2542126a3ec914bbf0ae6a4271fd7e8e9b02e78497b29e7157ab9869e76042c78404e285346db0","ssdeep":"192:7cD3nPevm+yrBJpSohN53xg4nx3r/vckvHGs/LtKi4wa10t44QtSbGxztk:83Ppo1xi","tlshash":"9592643da44a5109b217e6e2bb52af853f8f0153cf1663b476f5a5b4d38a4bcc1722c8","first_seen":"2025-04-28T03:27:23.898289Z","last_seen":"2026-03-15T22:38:15.20097Z","times_seen":23,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/mp3.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.415Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/mp3.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c3fa9e5b28a-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qF76UkZbFHcCqGnVAinQ467etCp9iJxL%2FAMCS7DoZ2L27vEH%2Fn%2BLLux71fZzsUFwecNmfkl9jy9RB27yzqyvf91VCGgWu4H1ASgo68klxqVipsLuWPFq%2B6BFGWm3dumwdnZ4MCYQL4riMA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=490\u0026min_rtt=490\u0026rtt_var=245\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=706\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bd915ab146fce71973008769756a699a","sha1":"9f929e464eb2b4310b24a085ed4fbdad90c491e8","sha256":"86a8a8c9d40312ec238e468979680b9cf147e0a7b06305635595a67fd3d4e7d8","sha512":"2dc9a78c64d6791a722f56656c2fbd151a8fd1d6a650d46e9a0a4f1d45992d3b1fc727616352f8232ae304d16da75ac1a26a329e5a37d3d965534a6db9c08faa","ssdeep":"","tlshash":"ef617d13f82b307bd19829c615a07754c89f3a914629abd10d3add2c34946fe1ee03fa","first_seen":"2025-04-28T03:27:23.907403Z","last_seen":"2026-03-15T22:38:15.231086Z","times_seen":23,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":127,"dns":0,"connect":1,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 351052\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqWjh%2F3gj5DsNwj6Z4Ddif9oUkmL7Img%2BvACGbvULIlu9Zh6rNdXDd4M1TzKr%2F6xVeUMMLIUO4wgpR15UQmR2vMXoGRb01kUTUiarMkG6IA%3D\"}]}\r\netag: W/\"65aa8545-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 99d67c4dab64c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-09-02T16:10:02.170015Z","times_seen":13546,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:12.430Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/script.js\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkS%2BugNYPQiYMo9nlMSmJEDJG3GnVrz3h7fEwLyjZRRHKVmyd8RxQAABzdLwXHRVErPBc%2Bwx0kvU5kGxkIEBtm5SxflDzSeNAzBIupzJVIU%3D\"}]}\r\nCF-RAY: 99d67c51a825120a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/favicon.ico","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:47:57.989Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hdsector.animeproxy.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:47:58 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccess-Control-Allow-Origin: *\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMg6zTUNw4FcZcBcgzXysU8L7VlpLV%2B14yA25K%2FQJKY0l2zG3whEq4PMwNUIZQ5r24frYSNdJOiDYVZTvEOP1AxLdmBaS28cFTfSIkjJHHpW%2FRgTN3H3\"}]}\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 12 Nov 2025 13:47:58 GMT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 99d67bf76d98b1b8-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]}],"data":{"size":6217,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3948), with CRLF, LF line terminators","md5":"51fa356dcf76ba9e01ec230109c01c00","sha1":"6cdcf894dda4af744e06fc2d07e2347b2b66c33a","sha256":"f2b82b62d8b49de0382b748cdc57342acd85ac394facec460ee9afdac792f128","sha512":"c8566e3f085fdb93872b7fba2a7319c39c0343b9286d1cc1ab59b9be899711d08d668d57641d1a15bd52d7ce9a9b2e05b5773a092c873d18046dcaa5b589785c","ssdeep":"192:sGKTwUTcEzyqTOb9AVpBuEuFPPGKTwUTbtD:0TwURzyqTOCpBuEujTwUl","tlshash":"69d1d91baea7d266931392d0f8f1bf6db431201ba6014d74c4e964aed3ccfc40d2a548","first_seen":"2025-11-12T13:48:42.929578Z","last_seen":"2025-11-12T13:48:42.929578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T13:47:58Z","timestamp":1762955278,"ip_dst":{"addr":"172.18.0.4","port":54466,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2025-11-12T13:47:58.214912+0000\",\"flow_id\":1474056667645322,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.30.49\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":54466,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"hdsector.animeproxy.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://hdsector.animeproxy.net/?__cf_chl_rt_tk=D6k3AIw4O8V6nvuP8b6_9whyd_YG4XTyAzvGH1GB5cQ-1762955277-1.0.1.1-EVhrRCJd9N2yN_PTLkvOjXrKTiCxoUFTZqIka.O1VAI\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2151},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":6217,\"tx_id\":1}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":22,\"pkts_toclient\":43,\"bytes_toserver\":2488,\"bytes_toclient\":55246,\"start\":\"2025-11-12T13:47:57.902538+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T13:48:08Z","timestamp":1762955288,"ip_dst":{"addr":"172.18.0.4","port":54470,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2025-11-12T13:48:08.220108+0000\",\"flow_id\":407680712514375,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.30.49\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":54470,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"hdsector.animeproxy.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://hdsector.animeproxy.net/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2151},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":6217,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":841,\"bytes_toclient\":3271,\"start\":\"2025-11-12T13:47:57.990023+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F3%2Findex.html\u0026l=1324\u0026fd=194","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.602Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F3%2Findex.html\u0026l=1324\u0026fd=194 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/message.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 5402\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8545-151a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 351052\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ba9HG2uWR537EFf0qWYgkSnwWXAxw7PcgRusVsR%2FQYLCrKRIqa6hbF28Gc8CExGrwSF7wNSUHlsodA8mvgxog5wmw1xCeRqMQKmneGyQb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d67c4d9b29c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cd733a315b8211d98f006e6ea0803f4b","sha1":"7d171c38df62cfdaa0c6ec35f8c37aa183c52b54","sha256":"ce16892d1608a82787b41a5402c081485e9af89ecfcc525a850bdf13ddce6b70","sha512":"62bbfe897924bc8210b9315fa36ac169730f98a2c338aa31189fcd0f4507afa68bbb5b1e5c4527fa645c8571583883b6eea0ac8938c312df64ea8edc72d6e44d","ssdeep":"96:MhuQ5xSlknmWIH2IsIKiHhHDH5E1opW+HriIjVPfog+AAaFh6iGVDRTyeJZ7:MEQvSlknJIKiBjHpnHriIjpTRFgiGxlD","tlshash":"23b13b84fe22de426519ea56a6f9ef035b3f52c99a81c481fcc59c57842007ed06cec7","first_seen":"2025-05-26T10:03:00.759493Z","last_seen":"2026-09-01T19:57:12.328089Z","times_seen":2515,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/ren.gif?sid=H4sIAAAAAAAC_1RST4gcxRut3uT0C-SHMSgISiMeFNxJ_5vZboNE1xgNxiQmkQg5VVdVz5bT09VW9Z_Zubi4GHJzPAiepPfNbhbjInrLRQiz3hYEx4t7yF48ehIheJSZXYl-h-97H68O7736bm-UB8RHSfevvquGMk3pmXbLsV-8KTOuamNfvmG7Tss5a9-UWSc4aw9mTVevuH7Qcl6y3xKsp854jus4ruPaF6QWiRqcmbOQ-U7ktiKnFXgttx1goP-7m9KCoRZ4dUBOQfLp_39LbkGyCbL-d-eF6RUqf_nNfpnSQmlUfPv9rJepOkP_MUy0hSTbPnoNZaaEfLkAlW0fOYCqNmcOEMspWXjqIeJs-0gm4mrrUGmcQmSI-QnU1QQinUDSCZhah-Q_E4BxXL6CrH_3stI1XT1k6YydkuOP_oSsp-T4w9PI-t8up3JgX1dpWUiVGQySBnIwgexOkJe7KIYWZL0LVnwCyX8iztMnkPXvva0q2bMroXuQfP8Fr-0kfhCyxSARwWIgOF2kImwvJsITNHS8MPTb86BkMgE1CyiNhVJaKBMLZW6hz_ftwAkD5lK_k0ScLTkBDQIuYicKPcehEVtCyWYORijyEVg6AtNryPUaenIEXT6AWWlguAVTEFS8QS0IakNQU4JaEtQFQV01Wzw1nmnu8tSUsXs0vaPpN2NVdDfoliq6IiOgegTNm02Zf2TWwYpj42Fi-FjNGo2LZkxj3mzkB-SJebh_fPAIPbFvUy_sRI63FLl0KQlYFMYsdkXoer7nMb4UwsgG0iyAGgtDOSVWc4BcTgn57FfEdBcm3QWTz4OWz4LWDehKg2G2U2ZxqlhP8Jbk4KpBXhxHsWptpAfkyfG1G8sP5jJunXwVgu29Rg4LTDfIdYMP5Y8E3fTO-JqqyeY1VRvy_ZW8kH05pLP_v17QQhy7945YrZXmF8-b0devsxkxgzs3hCku0YzLrGvIN8uSc6EvKM0E-eGiuSniq6VZWS51VuaXrr5x4WI_18IYqbIJqJyS__GPweSUnPrr5Py2_dtfgOVrMPneua_uv_f7p8_dh1EEcW4hlQSp2CP_6KdxA_OvPX6MN8wddLUFWqwj6zeodIMqbUDTEUx5bFzkeu_cL_68EKfWOE61tRmnOv38MCcj9-22F_udMOyIpMMTn_uez6O2I6KARp0gCtoozFSeHj3zdwAAAP__5uUaUn4EAAA=","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 21:51:40 GMT","end":"Thu, 01 Jan 2026 21:51:39 GMT"},"fingerprint":{"sha1":"AC:0E:0A:1C:AA:E5:DB:3D:5E:08:F6:26:F1:1D:98:65:42:D8:4F:97","sha256":"24:D8:C8:0C:EB:CB:B6:51:7E:D6:F0:16:2A:4D:4C:93:AF:30:D4:E9:B0:FF:9D:5C:C7:9E:8F:A5:CE:E2:1A:E1"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RST4gcxRut3uT0C-SHMSgISiMeFNxJ_5vZboNE1xgNxiQmkQg5VVdVz5bT09VW9Z_Zubi4GHJzPAiepPfNbhbjInrLRQiz3hYEx4t7yF48ehIheJSZXYl-h-97H68O7736bm-UB8RHSfevvquGMk3pmXbLsV-8KTOuamNfvmG7Tss5a9-UWSc4aw9mTVevuH7Qcl6y3xKsp854jus4ruPaF6QWiRqcmbOQ-U7ktiKnFXgttx1goP-7m9KCoRZ4dUBOQfLp_39LbkGyCbL-d-eF6RUqf_nNfpnSQmlUfPv9rJepOkP_MUy0hSTbPnoNZaaEfLkAlW0fOYCqNmcOEMspWXjqIeJs-0gm4mrrUGmcQmSI-QnU1QQinUDSCZhah-Q_E4BxXL6CrH_3stI1XT1k6YydkuOP_oSsp-T4w9PI-t8up3JgX1dpWUiVGQySBnIwgexOkJe7KIYWZL0LVnwCyX8iztMnkPXvva0q2bMroXuQfP8Fr-0kfhCyxSARwWIgOF2kImwvJsITNHS8MPTb86BkMgE1CyiNhVJaKBMLZW6hz_ftwAkD5lK_k0ScLTkBDQIuYicKPcehEVtCyWYORijyEVg6AtNryPUaenIEXT6AWWlguAVTEFS8QS0IakNQU4JaEtQFQV01Wzw1nmnu8tSUsXs0vaPpN2NVdDfoliq6IiOgegTNm02Zf2TWwYpj42Fi-FjNGo2LZkxj3mzkB-SJebh_fPAIPbFvUy_sRI63FLl0KQlYFMYsdkXoer7nMb4UwsgG0iyAGgtDOSVWc4BcTgn57FfEdBcm3QWTz4OWz4LWDehKg2G2U2ZxqlhP8Jbk4KpBXhxHsWptpAfkyfG1G8sP5jJunXwVgu29Rg4LTDfIdYMP5Y8E3fTO-JqqyeY1VRvy_ZW8kH05pLP_v17QQhy7945YrZXmF8-b0devsxkxgzs3hCku0YzLrGvIN8uSc6EvKM0E-eGiuSniq6VZWS51VuaXrr5x4WI_18IYqbIJqJyS__GPweSUnPrr5Py2_dtfgOVrMPneua_uv_f7p8_dh1EEcW4hlQSp2CP_6KdxA_OvPX6MN8wddLUFWqwj6zeodIMqbUDTEUx5bFzkeu_cL_68EKfWOE61tRmnOv38MCcj9-22F_udMOyIpMMTn_uez6O2I6KARp0gCtoozFSeHj3zdwAAAP__5uUaUn4EAAA= HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: uid_id2=c906963e-befa-48de-87ab-c91ac896eaef:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; sleca286902791a7f4c98bcb1e812322cd78=[5967421]; u_pl22675059=1; sleca032b4d33c8aea68a4f9b84235614bff=[5967421]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2dabec54c6a7a8d1696acf5efa8af9a1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/99d67bf99832b51e/1762955278780/SGJkBgL471Smrvn","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2025-11-12T13:48:01.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/99d67bf99832b51e/1762955278780/SGJkBgL471Smrvn HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 325\r\ncf-ray: 99d67c0d6b85b51e-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 45, 8-bit/color RGBA, non-interlaced","md5":"868c077474296b235d9239b6cc8fe1eb","sha1":"fb126353e03779e3321fbf60485263aee8c0463b","sha256":"ac2870b75bb419fde74ce050e25f3819cf5c7bc812f4a9edc51db4d111b3377e","sha512":"c27574030c8d601f9dc85c504e1b27e8ac07f3c861b81a2b857e7161dfa4ba5634a565b23f28f186941bc8386c87b21ac0946f54b27793debe4332901224b52b","ssdeep":"","tlshash":"08e0bf42bd1cde95d55d5a20039e753a42d9526396c105982337c8ddaf5e8bf21338b4","first_seen":"2025-05-21T18:21:56.253829Z","last_seen":"2026-04-02T20:07:48.837097Z","times_seen":107,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/bollywood.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.403Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/bollywood.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c40fc6cb1b8-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bFmaTmeY%2BEGD%2Bnpe8CFGfqAytjMNTJWapPZaNS3bGMw%2FDSBGRm2h%2F94LOEV0pd%2Fse8DLJjfA4R%2BygUpgaAxhjEsjIFgrFK0btgKgLZBdAouyxyR83X8P6MPP9jkku1%2Bmsh6oiFhG24L1RA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=755\u0026min_rtt=441\u0026rtt_var=225\u0026sent=25\u0026recv=18\u0026lost=0\u0026retrans=0\u0026sent_bytes=18638\u0026recv_bytes=3172\u0026delivery_rate=15422485\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"120e6061411fa0d9b96499245e96a7df","sha1":"ac48ee2db3e4cd4a5c25295c51e3733aeb5c8f0c","sha256":"5c13c586b781af98c4bc578c99d2b28566756b8d81ea7b39bc314c55344d04cf","sha512":"2ae9c37dd72597ffe9f1902e22cd90014cdafc51ac50b70ff79aa73ab46a6cad38ecc2cbb540055de3fe4213fa7cc26bdf705d9617d39bd6517a66a64285c40b","ssdeep":"","tlshash":"12716dbb0d201a11c86012719489378c36abd4c638cfa5e5b5b28edb5bf4d46e47c165","first_seen":"2025-04-28T03:27:23.904991Z","last_seen":"2026-03-15T22:38:15.194877Z","times_seen":23,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":356,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.104.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=de143bc6-7f58-4b9b-9519-c21fdf0ca0d4:1:1; expires=Sat, 10 Nov 2035 13:48:10 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ddb828f471c64da1a8a146f2308263a6","sha1":"61610913a809c3bbd39ffd8b83c579181d402712","sha256":"8871859c35b8b37387f7681c7d23e7c4ebfa85b9a8ab494050c5ac383c71217d","sha512":"9877dd20846adfc6796d3a3a3989bcebb74ee3c9b1a9f5d8a168d31b509e5cf1cc1b212a258cf499f7d38480f4be1c540e48dbce6d37c49114cf1a5e0d13ff89","ssdeep":"","tlshash":"ed900474f31303df1d1d1c5773d4101153414c1d07dc0404050cd051744f0010053044","first_seen":"2025-11-12T13:48:42.936101Z","last_seen":"2025-11-12T13:48:42.936101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.104.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=3a1cf6d8-9731-4533-87bf-6e89bcc76fbf:1:1; expires=Sat, 10 Nov 2035 13:48:09 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"a14a2058d20fe02a8d032eec3aeb736d","sha1":"9e34c35e7a59ed0c424b4c4617a5e04c6b3e9bbd","sha256":"df49c6a083114774a0a05706f51063d243f08bc766d0079da1e1934204931ed1","sha512":"2d58c247efde657fd6787af299f8a1ff363867af606a97cdce2a18b40975be18a6036bc8419f95bb40c81c4f7880dce74305a595ac088a435d39cfc9f2dfbcb3","ssdeep":"","tlshash":"069004f011dc777c035577175011f11015054030c04304030370d744301cc445fd1434","first_seen":"2025-11-12T13:48:42.937844Z","last_seen":"2025-11-12T13:48:42.937844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":21,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"vmuid.com/uid/send","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":80,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.826Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /uid/send HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hdsector.animeproxy.net/\r\nContent-Type: multipart/form-data; boundary=---------------------------208371663941490079872733466585\r\nContent-Length: 323\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/json\r\nContent-Length: 65\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: http://hdsector.animeproxy.net\r\nAccess-Control-Allow-Headers: X-Requested-With, content-type, access-control-allow-origin, access-control-allow-methods, access-control-allow-headers, set-cookie, Cookie\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: guid=6480dcf9-8f85-4b51-bd27-d779d4f38c13; expires=Wed, 31 Dec 2025 00:00:00 GMT; domain=vmuid.com; path=/; secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"882a46be5d7c51fefb426abe28faaa8f","sha1":"2cf3b4b30da6dfa423f2436c9d1b6acec036e550","sha256":"6d2e1c46d7422082bf3e92f2a9bc706328691b46139890a836570dfcc36274d5","sha512":"fb5fa54b8ece972a1ce0d2fdbedefa726b283f0f8b0d2764c579eae337a78e2ece1afaa92763aa1c797476eaeba4445cf4933ad4631c15c9e302330cf14e7558","ssdeep":"","tlshash":"9fa00245f76453b611b032010cb825455e5484d89168929cd045a0257719e4570de9e8","first_seen":"2025-11-12T13:48:42.939609Z","last_seen":"2025-11-12T13:48:42.939609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":21,"dns":1,"connect":31,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"vmuid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/sbar.json?key=a032b4d33c8aea68a4f9b84235614bff\u0026uuid=c906963e-befa-48de-87ab-c91ac896eaef%3A2%3A1","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 21:51:40 GMT","end":"Thu, 01 Jan 2026 21:51:39 GMT"},"fingerprint":{"sha1":"AC:0E:0A:1C:AA:E5:DB:3D:5E:08:F6:26:F1:1D:98:65:42:D8:4F:97","sha256":"24:D8:C8:0C:EB:CB:B6:51:7E:D6:F0:16:2A:4D:4C:93:AF:30:D4:E9:B0:FF:9D:5C:C7:9E:8F:A5:CE:E2:1A:E1"}}},"request":{"raw":"GET /sbar.json?key=a032b4d33c8aea68a4f9b84235614bff\u0026uuid=c906963e-befa-48de-87ab-c91ac896eaef%3A2%3A1 HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:10 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4667\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=c906963e-befa-48de-87ab-c91ac896eaef:2:1; expires=Wed, 19 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\nu_pl22675059=1; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\nsleca032b4d33c8aea68a4f9b84235614bff=[5967421]; expires=Wed, 12 Nov 2025 13:48:15 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 219\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: be67c1dea00296c52cd19fa60685537f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5997,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"94da8a237d91b30ea178715fd6f802f7","sha1":"a0b40479351848c101e56cc3322af04e91b9230e","sha256":"f9228c1960adf0f285e481d8dbecda0f22917d3d739c329d83546ffc25a5fb2d","sha512":"bfcfba68f50d7ed68bbcd3a0b988e381b34e22f3f6cee1577e4f9318be0db9e26575d6f69f1dcf76be47912801361880173e0a9a299fe95e8b78183220b6ad5a","ssdeep":"96:9zagP3OUQW8Kil4mT/Bf1DC7EzZBTM/gMPg47OIzpXxvMyW4VCVUyo1o:9zay5QbKil4I916Qoj1pXxvMrMy0o","tlshash":"a3c15c3de0801a95414ecd6c3e3a6ef0cd812faf40612f9cb95b0b6e126d560ca42766","first_seen":"2025-11-12T13:48:42.941012Z","last_seen":"2025-11-12T13:48:42.941012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":281,"dns":0,"connect":93,"send":0,"wait":315,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cordbraghare.com/sbar.json?key=a032b4d33c8aea68a4f9b84235614bff\u0026uuid=3a1cf6d8-9731-4533-87bf-6e89bcc76fbf%3A1%3A1","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cordbraghare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 09:03:59 GMT","end":"Tue, 13 Jan 2026 09:03:58 GMT"},"fingerprint":{"sha1":"F7:61:EB:D3:87:63:39:5E:37:E5:5B:76:89:AA:51:8D:38:D2:5E:78","sha256":"5D:83:AA:A0:01:37:BC:23:75:58:BD:25:9A:7A:5A:77:7C:07:1F:D4:85:06:9F:B9:F6:5A:A4:D9:64:7B:DE:7C"}}},"request":{"raw":"GET /sbar.json?key=a032b4d33c8aea68a4f9b84235614bff\u0026uuid=3a1cf6d8-9731-4533-87bf-6e89bcc76fbf%3A1%3A1 HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3590\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=3a1cf6d8-9731-4533-87bf-6e89bcc76fbf:1:1; expires=Wed, 19 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 13 Nov 2025 13:48:11 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 13 Nov 2025 13:48:11 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 13 Nov 2025 13:48:11 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 13 Nov 2025 13:48:11 GMT; path=/; secure; SameSite=None\nu_pl22675059=1; expires=Thu, 13 Nov 2025 13:48:11 GMT; path=/; secure; SameSite=None\nsleca032b4d33c8aea68a4f9b84235614bff=[5967421]; expires=Wed, 12 Nov 2025 13:48:16 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 219\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 97ece624217128af0e9bbab80f4d0e7b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5981,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"22c88204ab60b28b85f7ed8cb5da7c6f","sha1":"31dc47856916c41fcfe652895ebeba1e3e3c2a90","sha256":"b3ff681362f94ecb83ba7796e2bb927bd8d64955b28584cd251ca2f6c39739f8","sha512":"d6043343efc1f46a4185bcd57f433412b4322d489297b8d13acc11a75492d5a4fd39097c8bf9d5249eae2bb4dfef70773e14ce86cf3336d1c2b21ff5443f20f5","ssdeep":"96:9zagJ8S9lC17RPpwyGDuXgd09amHAo4mpKQPIk2ks8S9lC17RPEkxyx1o:9zaxwC1lPhGiX009bHgmIQpwC1lPEsyg","tlshash":"dcc16d6f5c4422e546c31eae350b1ce90d0196cda10c885ff767b8ad8a5f778cba2286","first_seen":"2025-11-12T13:48:42.942621Z","last_seen":"2025-11-12T13:48:42.942621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":282,"dns":1,"connect":91,"send":0,"wait":324,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/themes/default/images/favicon.ico","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.198Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/default/images/favicon.ico HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk; dom3ic8zudi28v8lr6fgphwffqoz0j6c=250f348c-4fe4-4eda-ae85-fe2ea8028835%3A2%3A1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:10 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:10 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Vg8Kgm8A2Y74xjzXC25j6i4f%2B7fvO6IXS7l3hnzMczVxXjoaw94A%2B2IjZYJyz3nxPrqqdZYUJ0tB4VoCpCXSaOANq3jd3l8zuJuqFHoklOyZ4FOBZvcXEEcuH%2BPnxwXu5qV%2BPvsZI4Q1Uw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 99d67c43bef976ef-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=934\u0026min_rtt=446\u0026rtt_var=419\u0026sent=169\u0026recv=106\u0026lost=0\u0026retrans=0\u0026sent_bytes=195012\u0026recv_bytes=16823\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13908,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"04a2391386b8b3df1cd7ad50b2e8178e","sha1":"1c1981ea0300c4262360112cf420058711a18250","sha256":"eef9fc70c327aebbbd1ca2b95e46ce18a7a83530e1a7eae72b6fa3be3905fd67","sha512":"ea518665d421f1dcc132c2ef940092f944eb51d6243ea929f2759e57a575e019cc563c78eefeecd83d95cf0d3e82e6f1f193b282f7d6e054fb98f191a15d354c","ssdeep":"192:7YHhp2M3MzppUr2pEqYFDzeR00QWSYuLUu/MYE1lk:79gMUWYFz6So1lk","tlshash":"06521e627241c894c81072f45c06d8c71ea2bdd65988b0a730f2bb5fe9b22a7cc5773e","first_seen":"2025-04-28T03:27:23.897398Z","last_seen":"2026-03-15T22:38:15.196735Z","times_seen":23,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tn0LVchMySRn4S0pTztUR4sUyZrndtG9ZwVXrsPWtYttD%2FGOs61T4QR7gX0b31MhCNfOdAtgkT1hJjIcs%2Baxr6eRY7DnSAH1mnEo49442%2BE%3D\"}]}\r\nage: 351051\r\ncf-cache-status: HIT\r\netag: W/\"65aa8545-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 99d67c4cead976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-09-02T16:10:02.170015Z","times_seen":13546,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":36,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/favicon.ico","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:47:57.951Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hdsector.animeproxy.net/?__cf_chl_rt_tk=D6k3AIw4O8V6nvuP8b6_9whyd_YG4XTyAzvGH1GB5cQ-1762955277-1.0.1.1-EVhrRCJd9N2yN_PTLkvOjXrKTiCxoUFTZqIka.O1VAI\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:47:58 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccess-Control-Allow-Origin: *\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtdFiR0aTFS367NRPXxvoZDIZZrl%2BvknIX%2Bmq%2BH705%2BUTOOksXGM6m3FTmZT05yq2YiQucwktL9vLbUsPM91ZHD9bwksKTAx3vvDYO7vH%2FqjN%2F14M28i\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:47:58 GMT\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 99d67bf72a8076ef-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6217,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3948), with CRLF, LF line terminators","md5":"51fa356dcf76ba9e01ec230109c01c00","sha1":"6cdcf894dda4af744e06fc2d07e2347b2b66c33a","sha256":"f2b82b62d8b49de0382b748cdc57342acd85ac394facec460ee9afdac792f128","sha512":"c8566e3f085fdb93872b7fba2a7319c39c0343b9286d1cc1ab59b9be899711d08d668d57641d1a15bd52d7ce9a9b2e05b5773a092c873d18046dcaa5b589785c","ssdeep":"192:sGKTwUTcEzyqTOb9AVpBuEuFPPGKTwUTbtD:0TwURzyqTOCpBuEujTwUl","tlshash":"69d1d91baea7d266931392d0f8f1bf6db431201ba6014d74c4e964aed3ccfc40d2a548","first_seen":"2025-11-12T13:48:42.929578Z","last_seen":"2025-11-12T13:48:42.929578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T13:47:58Z","timestamp":1762955278,"ip_dst":{"addr":"172.18.0.4","port":54466,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2025-11-12T13:47:58.214912+0000\",\"flow_id\":1474056667645322,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.30.49\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":54466,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"hdsector.animeproxy.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://hdsector.animeproxy.net/?__cf_chl_rt_tk=D6k3AIw4O8V6nvuP8b6_9whyd_YG4XTyAzvGH1GB5cQ-1762955277-1.0.1.1-EVhrRCJd9N2yN_PTLkvOjXrKTiCxoUFTZqIka.O1VAI\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2151},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":6217,\"tx_id\":1}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":22,\"pkts_toclient\":43,\"bytes_toserver\":2488,\"bytes_toclient\":55246,\"start\":\"2025-11-12T13:47:57.902538+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-12T13:48:08Z","timestamp":1762955288,"ip_dst":{"addr":"172.18.0.4","port":54470,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2025-11-12T13:48:08.220108+0000\",\"flow_id\":407680712514375,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.30.49\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":54470,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"hdsector.animeproxy.net\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://hdsector.animeproxy.net/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2151},\"files\":[{\"filename\":\"/favicon.ico\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":6217,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":841,\"bytes_toclient\":3271,\"start\":\"2025-11-12T13:47:57.990023+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/themes/default/images/block-top.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.607Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/default/images/block-top.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/themes/default/theme.css\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c405d0c76ef-OSL\r\nAccess-Control-Allow-Origin: *\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: max-age=14400, must-revalidate\r\nPragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OcMRvkSFH79UAWyr5KJGIAsDHFayHr7M%2BXwxAYi8zaaJCxWV67gswMvc3Dg3CpV4Igez2F%2FZlUElTvTclHOm01SnpOgGdRGEfB7TEECUYfvKEtOz2tbYQi7r%2Fs57agxeGiPxNKkfzkXjQQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=503\u0026min_rtt=483\u0026rtt_var=80\u0026sent=7\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=4136\u0026recv_bytes=1447\u0026delivery_rate=10550091\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 25","md5":"4f29cc57144305bb32463fd607e8b675","sha1":"fad3a7241812c62d315d2d895acb9e07424b45f3","sha256":"3b30743623f004986696875f22be3c07b65e653d039fdaf69bd67b949a35722e","sha512":"156ba548ff3f9768af2fd28f0bbd5d9e3d4e27dad3949fc93cc08e23aa35b4a8c6bed796de86cd5c64f0adfd9fbff5cb50913620e3b42bdee77e53321f4372b9","ssdeep":"","tlshash":"87c02b43b0bcb0c1de8090f04041c0053f03630043420787e97da14738c0363241720c","first_seen":"2025-04-28T03:27:23.895081Z","last_seen":"2026-03-15T22:38:15.236064Z","times_seen":23,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cordbraghare.com/pixel/sbe?t=3\u0026error=external-error","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cordbraghare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 09:03:59 GMT","end":"Tue, 13 Jan 2026 09:03:58 GMT"},"fingerprint":{"sha1":"F7:61:EB:D3:87:63:39:5E:37:E5:5B:76:89:AA:51:8D:38:D2:5E:78","sha256":"5D:83:AA:A0:01:37:BC:23:75:58:BD:25:9A:7A:5A:77:7C:07:1F:D4:85:06:9F:B9:F6:5A:A4:D9:64:7B:DE:7C"}}},"request":{"raw":"GET /pixel/sbe?t=3\u0026error=external-error HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: uid_id2=3a1cf6d8-9731-4533-87bf-6e89bcc76fbf:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl22675059=1; sleca032b4d33c8aea68a4f9b84235614bff=[5967421]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:12 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 17285\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZuUU0wrqAm14QHnkK7WaAsCaj4Nn%2B0kcgp4MYrUxcD6%2F%2Bu41e66ncxIu7933ECHxTDZqt4BQrmrQVE1t01RniTmVfTLQFKGyNA1IFu45oA%3D\"}]}\r\netag: W/\"65aa8545-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 99d67c4d8b28c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3011bde2653e373d1150594a8bbd06d","sha1":"e47948cdb4d6ecf6257106805e690e3bf0211317","sha256":"6499ec40e3f2ac55bf1b5c9a2dbbc212adb74114645bccac0373074f98ef8a01","sha512":"068957d81c2ca296e44c3bbfb20bc6572d79b4e4e848cb98c84bb119cb7350633a9c32d250999216e75ce05c99bac9050aa4fc1c77a359cd40f5d8d6ab25dd25","ssdeep":"","tlshash":"ee21dbcc858f223ef324ff618973166067a423f6bb19c5bcb199a8157e1cb910c48e14","first_seen":"2024-05-03T00:07:48Z","last_seen":"2026-09-01T14:14:47.865644Z","times_seen":2476,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=99d67bf60c6c0afa","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:47:57.904Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=99d67bf60c6c0afa HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hdsector.animeproxy.net/?__cf_chl_rt_tk=D6k3AIw4O8V6nvuP8b6_9whyd_YG4XTyAzvGH1GB5cQ-1762955277-1.0.1.1-EVhrRCJd9N2yN_PTLkvOjXrKTiCxoUFTZqIka.O1VAI\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:47:57 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FU3Z0E1%2BkJ4oaKdcuASpyGZeuxgAXNBGR2ArIfqzyRaGMqxMJ1T0th9BOEQ3%2FWtfvY7d9XfwhGiXecK5stvk9LCta8gCSLkn2XP2ptpEdlYKUKQvQ3BiaoGwmFuivneHiKfKZ%2BjWGSIy%2BA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 99d67bf6e99d76ef-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=510\u0026min_rtt=510\u0026rtt_var=255\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=535\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122224,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"afbd43265dc117963364e3bd17e72e01","sha1":"ae65176f9749e5d70c00ad0bfcdee650c1e938fa","sha256":"12ce58451af596c38282bf892b425eb11ecb8bdf4057523a8be5723f03a93568","sha512":"c5d514126b61054382c7a9906857fb23fbe9eb3f741c2e3b2bb961dddcfe6b00f9f4dff32e3399b35ab012589c6f44c5a06d2fa411b9df9ef5d90ef44224fc36","ssdeep":"1536:iZz0ddDJWnRuJW87O9+PkKYqihNx03Nh0jJkGLzzz0Gq:iR0n5JWd1KYPNKrgzzz0r","tlshash":"84c3c58d75ca7445023398b5056775dba2ba7c4c301c9c4cfa61a8e93cbe358b763eb8","first_seen":"2025-11-12T13:48:42.947794Z","last_seen":"2025-11-12T13:48:42.947794Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1310543584:1762953160:b7Tv2A9YLJ75Vv3qsYpgKqbElUEZyqEmphvpY-HXUUo/99d67bf99832b51e/EE7ggV3H0bC5SH.ySUdGC2IZRzt2CWIRvsa8DnYj5u0-1762955278-1.2.1.1-EGSbslTHYio8oU00TPE33RiuhwXGrWynVMVK6kfDAfXwTo5XA9dYBMUJElnJTZWo","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2025-11-12T13:48:03.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1310543584:1762953160:b7Tv2A9YLJ75Vv3qsYpgKqbElUEZyqEmphvpY-HXUUo/99d67bf99832b51e/EE7ggV3H0bC5SH.ySUdGC2IZRzt2CWIRvsa8DnYj5u0-1762955278-1.2.1.1-EGSbslTHYio8oU00TPE33RiuhwXGrWynVMVK6kfDAfXwTo5XA9dYBMUJElnJTZWo HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: EE7ggV3H0bC5SH.ySUdGC2IZRzt2CWIRvsa8DnYj5u0-1762955278-1.2.1.1-EGSbslTHYio8oU00TPE33RiuhwXGrWynVMVK6kfDAfXwTo5XA9dYBMUJElnJTZWo\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 33239\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:03 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: xyglqNJYss4vkasTPxAZYKjgCGTVlnSsBysSYLv7hMwfrX1PaZAgoEPWHyS6tFHW$HuPqUVwFc8vpPF5ZpSvYpQ==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 99d67c1bb97fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28784,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (28784), with no line terminators","md5":"318539c726acb9647fef269cb6b0b938","sha1":"61048eb70dc162431089c006d446b2f42d145b78","sha256":"2c5e830f7c1df1039b8b6ef85271eeaf7d1c566eeba30c9697652d4345615443","sha512":"80ae55ed4a7c7e6674be65a7dbbca91b0f173dda98af552294738e00c562dd121de5cd614114344aac488614fd78f960f3fa40c03b869581928c77535886c6d2","ssdeep":"768:jT9WgvZZSA2uwGlfbVpYFbeSTY6nufUuqG6/4zSQA++ZtDe:jTNeTGdbbYxFTpPuqjwjn0K","tlshash":"6fd2e129bdf7beac22f4a623c564705b32b10fd3435d8ad49d1af46261928c79c7c21d","first_seen":"2025-11-12T13:48:42.949503Z","last_seen":"2025-11-12T13:48:42.949503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/health/health_0.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.413Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/health/health_0.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c41af88b28a-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C6tHUGTR4CZLWfWNwJyxltdV1%2FlWAfOpo1TZ5L38sMHzxO5k5TIiGt6O52y9%2BKdKOH%2FC4VGrMdsrlBxcggY8exHfJTyO8GjlhtnZ%2Fsp6O9QAEROqfxN%2BWMJFRgj9Rk9F6OueET180vTXrQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=514\u0026min_rtt=442\u0026rtt_var=97\u0026sent=13\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=7327\u0026recv_bytes=2851\u0026delivery_rate=9900854\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 59 x 13","md5":"c0930b3132305ac28ae8cf0a1f87e39d","sha1":"ef49115344cb06e4e512272cf55634210a542727","sha256":"dc3bd4d9526ce25eceb794d8981dfd907460a6343bc121cc79eea14f23a405db","sha512":"694677b9693b3aef967871ed95f84b50e7098ddcd9ef051351e00496a265ccab11483455d75139c5c65b66102c19ff8975ecc10be42a8051cc540086d5cbe9cd","ssdeep":"","tlshash":"70e0611d950cc837c4120bf51d0392d562c11cf5c9e4066a25b74ef751f7485997a54d","first_seen":"2024-12-01T21:24:54.594544Z","last_seen":"2026-03-15T22:38:15.203424Z","times_seen":24,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cordbraghare.com/22/00/54/2200540f09f939738419313a1a090c32.js","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.428Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /22/00/54/2200540f09f939738419313a1a090c32.js HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 37909\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4769646775617eebf11664691509fc66\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":106711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2bc4a1f0cf3387ae19fdf7043322beb5","sha1":"65a7bc5460c5fd79a4c511165c08b7f6f61fa8d0","sha256":"1270345b75403c7188f02cdba8c39fb1261a1f8b2767f7f162ae59b4a8f06dac","sha512":"7f2b7f189066e66d6060925fd8aeb8b427cc6f44f003d631d77f23cfab3308a9592c1ac562f066358ad2eaba10b2c3faa4cfc4737c56c21e0a92f563a607f316","ssdeep":"1536:om9T0jLlKHI2HTXYao6R167ET/Dei89ZHf5nMJ6bzs1oT1LT:oRY3LKKJSee","tlshash":"40a3b6cc3f81f06d466a68b3123f800bf12e6d55908ce9dcf913e1e99eb8b5b9539524","first_seen":"2025-10-31T17:11:24.438989Z","last_seen":"2025-11-18T02:35:34.348098Z","times_seen":28,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":74,"dns":13,"connect":91,"send":0,"wait":100,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"msdoj.com","domain":"msdoj.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"msdoj.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 00:31:17 GMT","end":"Tue, 27 Jan 2026 00:31:16 GMT"},"fingerprint":{"sha1":"24:3D:C6:95:D8:7C:0F:F7:6E:05:D9:71:DB:8D:BE:15:4C:3B:92:CE","sha256":"0C:9E:BC:EA:67:F6:9E:73:4F:7F:C8:1D:F5:E7:D4:2C:AC:98:87:88:3F:AA:AC:79:61:82:13:14:4A:68:FD:2A"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: msdoj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://hdsector.animeproxy.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 64157\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64157,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64157), with no line terminators","md5":"b4fd6397b10863572e51a4e40be260f2","sha1":"3e7d5eec258d9990931457ad079e9da63f1fa248","sha256":"8ecec639fc30f49f52fb892451e79e811233ba707a5118eec6f89597b0d01777","sha512":"cc89e655d435c6b74c8bf3e8117672fbc34f084beafdb8906c6e7b347eb02b16cfe9cc9ca5d6784b4a2a5ce691adba8c3f7921bf815ae043ab7ae4bd4cb24461","ssdeep":"768:hCflSCRC850RCX+4D+R8WyX+86wA6C8Cflqu4sTJ+zaXeXgtA9zk4sTJ+HXJpZ63:qvV50gPowAzqfTqx9","tlshash":"df53d698b5d2f1a102c370b8543f6106b2366929248dc098f7b5ded5ad78d6ea633f3c","first_seen":"2025-11-12T13:48:42.952628Z","last_seen":"2025-11-12T13:48:42.952628Z","times_seen":1,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":108,"dns":0,"connect":34,"send":0,"wait":69,"receive":35,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.187Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/style.css\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7RT8iudmgMTCJBc4IiNc0l4JaQ9gexpYsom6RH6tpG0mGXOL4Vk1c3A1uwRQGnI%2FDvGQ9CDHNHJl3chapbsZpC9ChisVaBHrM%2Fq1GgJV2pA%3D\"}]}\r\nCF-RAY: 99d67c4a0a36c759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":18,"dns":19,"connect":1,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.659Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=avhaTSwcrKzQUE5JdYw0carPYSA5y9svNAELvdzmAE8XM%2F0BaqBlsh83jdgSHQ5QUCU%2B5FiXBZ1BVBOi%2B6Ku45geAxeZHc5p8Yl6U613Clo%3D\"}]}\r\nCF-RAY: 99d67c4cdc235a0f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.766Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHV5Tb%2FaH1pTvQJgvut%2FhCzukPgQAwVp3a%2BltNFcjZxObWEvPLfqEU1w6mmXGjV2W1pGkvfDLMXhAu5aKVdQ4j%2Bn1ihrfH7XpGnBXrhy\"}]}\r\nCF-RAY: 99d67c4d7d5456a5-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:12 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nage: 17285\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXMON%2F03xzVIfgqLIFUXzd%2Fyi3dNXkote1zsoKenGQcDOvi9PuEh9AQ%2FBLwqa360e1hJwgRtc18%2BFz9TOhB3%2BagW2eGknR1cyFW9lSgeqt8%3D\"}]}\r\netag: W/\"65aa8545-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 99d67c4dab5cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3011bde2653e373d1150594a8bbd06d","sha1":"e47948cdb4d6ecf6257106805e690e3bf0211317","sha256":"6499ec40e3f2ac55bf1b5c9a2dbbc212adb74114645bccac0373074f98ef8a01","sha512":"068957d81c2ca296e44c3bbfb20bc6572d79b4e4e848cb98c84bb119cb7350633a9c32d250999216e75ce05c99bac9050aa4fc1c77a359cd40f5d8d6ab25dd25","ssdeep":"","tlshash":"ee21dbcc858f223ef324ff618973166067a423f6bb19c5bcb199a8157e1cb910c48e14","first_seen":"2024-05-03T00:07:48Z","last_seen":"2026-09-01T14:14:47.865644Z","times_seen":2476,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/cdn-cgi/challenge-platform/h/b/flow/ov1/1108733656:1762953160:pzfo1kVlTJRe7Q0WrECECnKwVQHZnXUOxA2_bTvVyhE/99d67bf60c6c0afa/sWFQuesjd899XZ.7X11iVcYwpqz.yK96LHs.rlbQACM-1762955277-1.2.1.1-UHHjswWG.GuNxWDqrdgl_GZHB4e.xk1F2IkuhB6D6uAG4IFRjMUGIQ9Q.VnrnvJV","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.088Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1108733656:1762953160:pzfo1kVlTJRe7Q0WrECECnKwVQHZnXUOxA2_bTvVyhE/99d67bf60c6c0afa/sWFQuesjd899XZ.7X11iVcYwpqz.yK96LHs.rlbQACM-1762955277-1.2.1.1-UHHjswWG.GuNxWDqrdgl_GZHB4e.xk1F2IkuhB6D6uAG4IFRjMUGIQ9Q.VnrnvJV HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hdsector.animeproxy.net/\r\ncf-chl: sWFQuesjd899XZ.7X11iVcYwpqz.yK96LHs.rlbQACM-1762955277-1.2.1.1-UHHjswWG.GuNxWDqrdgl_GZHB4e.xk1F2IkuhB6D6uAG4IFRjMUGIQ9Q.VnrnvJV\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4375\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nset-cookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk; HttpOnly; SameSite=Strict; Path=/; Domain=animeproxy.net; Expires=Thu, 12 Nov 2026 13:48:09 GMT\r\ncf-chl-out: 3ckspsdbI643o6oXBz+qFs/A1WZCvfewaLYEyZi0OGc/WzuVJt3ZmqYDrTO0mNgJgFZw4NNw+GZ9dX+2Uke6rA==$T/yJ27dqwna1YDcnQOkmhA==\r\ncf-chl-out-s: xfvgtSpjGtSQhebzQ/PWpvFp2rYU7K1vHr9Hp10O1HamsXVlrHMj7LAesi/azsiqewsYO0LCdTUov/8qFIeNjQpC0JkoOmYU35Q608bk77VSN203yHP2kZPw5kN2xs+ror1oZfK4uEFMvbCtWuPs5XFxeJ3FH1F0fM5QVjdWWNsLyWqLx1G1vpGHFjS4tSTnAvRwepunDn36Owhz6k2hBKT2pmbKI6yjqFFkUveaO3ENeKlu6xHph5gmewxgJXlO9g0vQ8YhgTc8+yteWEgD7OOzdELYfpFdM5eWE1AzdF83yv0Ie6wXICU646xUa+WgPgnCz/r8F/X6aYqXqot1+zCPpZgiM47lPOC9bvfv02Moy94VLTUCe3+Uosd5/lTF$svQZas2bYDJMds7trWLYlQ==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qD%2BhqY6MnK5HVcMqJn9xHdKck5miYg4ApgdjKMVaPN8ANE4o5H3uMNMfyTEwHADwQG4puDyXWE5dHi65yFHcunQhSPmJED44%2FtqJrL3cUjL7djFhsJTDB10VxtBJh4eezFYFaipCtaihPA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 99d67c3ccaa876ef-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5969\u0026min_rtt=493\u0026rtt_var=10608\u0026sent=58\u0026recv=36\u0026lost=0\u0026retrans=0\u0026sent_bytes=65921\u0026recv_bytes=9094\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4168,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4168), with no line terminators","md5":"3097cc028edf620fc346b54b05d95e12","sha1":"9c1ad86006aaf77b2de4b8d8df1c768c94de668d","sha256":"9897d0a21d863cdc7bd25f8b7e9e1f314b8f840276aee45bc1adbdc1443ee2dc","sha512":"ab491e04b9034374551a2db8a764e3667da43b1a2b9fb7be43c6ece980535c6b2332edee09bf95ce019c12c25f1aaa893a67a43363029b653f63a5be72c1a6e0","ssdeep":"96:FtHyD30tHzxnchCpr3HSiO5a/d6yOmX2HXFk/N/qTIgQd/MXil+RHz1:K30tHzxaUr3Vya0yOmcFkl/V/MXiUh","tlshash":"42818e4ab8365d16a1b6e20ff84cce38bd844c2e36424bc1f620075071abbe633e3325","first_seen":"2025-11-12T13:48:42.954247Z","last_seen":"2025-11-12T13:48:42.954247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/bengali.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.414Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/bengali.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c41bedab1b8-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MuSqqSdznTlxROB6I8FYMunq61lgfghIsSwyVcAJ4Dp62xBLSUzLTYN%2B0cEsBsqeEwCPpj%2BBdI8zuxUckTxFw9sJ9tDbwE6Y7WQ8a1YteKeJd1ypFz%2Bfa4F30l0JiJMPuBT1wzOZCKx23Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=755\u0026min_rtt=441\u0026rtt_var=170\u0026sent=31\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=23184\u0026recv_bytes=3882\u0026delivery_rate=15422485\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ddf8c1646fe602566c5793073b1a50b8","sha1":"8b9513a6cebe4abd3153aa09c7027d116ff1e30b","sha256":"a11728c614dbc95187bd275427c30b2d8385a1eb05b61f0bc0f5b089300106ec","sha512":"6a138d393e7a3e5e36dda1c73e037d29132d7ee9f8ed97996c53323b23d6505671f73965b996a1e31c4c72aed2a0f46ffd8642c72658a34337b764347e5a9aa6","ssdeep":"96:vsPfmhGJ7QJ8HxH9EQhmJelzGn3avBY28MVyaMRNhAUR209U8gk7ONCJEcP+d:vsHmhgRzmYyn3o1OaMRNhAURp9U8MCL8","tlshash":"05a18dd091fa2158b2d25ae71e4a6084c0c6df8dc39017c99884932adee4ea7d65a50e","first_seen":"2025-04-28T03:27:23.908329Z","last_seen":"2026-03-15T22:38:15.206207Z","times_seen":23,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":466,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.942Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCF-RAY: 99d67c420a445a0f-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/93954b626b88/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PVQLGEEj6BgpeliyFRJpDsgD1CdwyBcZyjJtL7L2gipTMhWHYew0czXcuB2ee%2FfGYVueByxYa%2BF2PCXMui5GT7fTyKYLcOLilH9vaLoO04LCnM7Ryw%2Bb21EWkiqi50FZkMi4UfVradDGFw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=571\u0026min_rtt=453\u0026rtt_var=208\u0026sent=16\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=10873\u0026recv_bytes=2823\u0026delivery_rate=13163636\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10048,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.291Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg\r\nCache-Control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9E%2FctmbgrXBcCvq9cTATmiA2PVXF%2FFADUV3BpIoT8q%2By4tGMh1g8wg7c7ImGlqqM%2BWbk9AwF1sBzYrJv%2BY5q62etHOq4q%2BQVZ0%2BcH7Du\"}]}\r\nCF-RAY: 99d67c4adb3b56a5-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":50,"dns":0,"connect":1,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.610Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/style.css\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsFlLgdlVX7Ca6wxHpA0XE82mf9UshthMpXh32RRrR5XFZ%2BHWCFFVZJ9UY9UTNSWir5p0Ns11FxxJZuDrG8GWzQK0LUdukx%2BNFEo%2FTh8IIM%3D\"}]}\r\nCF-RAY: 99d67c4c78d7c759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.655Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css; charset=utf-8\r\nVary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nAccess-Control-Allow-Origin: *\r\nTiming-Allow-Origin: *\r\nLink: \u003chttp://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nExpires: Wed, 12 Nov 2025 13:48:11 GMT\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nCache-Control: private, max-age=86400\r\nCross-Origin-Resource-Policy: cross-origin\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nServer: ESF\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16728,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"39dc787548516ec620f30a5500133586","sha1":"b8d01180527e921595aa6b5642e2a2fb038f676b","sha256":"2e46c7278a0bbcfc47d46f5be5e56a8f3d59e69c1460e2a7866c567a9cbee3ad","sha512":"2d7760790bb9964b499edd23d6e6a88dbd52db0bced113809288fab47ab137569988af9adf430b42f680899ef0d6edd692378982f7844f8975fb0da8d76ba6ae","ssdeep":"384:YwfownwGwqwyzw/qY49wvwPwYwf7wswlwRwyAw/qY4ew0wUwvwfEwDwSw+wyXw/K:YL6TxfzQwYU14hgKfAQjrPiPO39fXQMP","tlshash":"9d720090041740009b839ce223cebf31fe5e92517151d0b9abfd9b6bedcbc5652693ad","first_seen":"2025-09-09T00:45:14.506759Z","last_seen":"2025-11-17T08:45:52.402875Z","times_seen":115,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.785Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ea344e4ed3e190c6ae75d4db7e0dc23f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2026-07-07T20:05:43.09583Z","times_seen":15231,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":17,"dns":1,"connect":17,"send":0,"wait":19,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/sweep/default/android-btn/3/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:30:46 GMT","end":"Tue, 06 Jan 2026 16:29:13 GMT"},"fingerprint":{"sha1":"CE:BB:4F:68:2C:89:90:90:9F:0D:E4:DC:37:55:B5:DC:41:49:D6:F9","sha256":"52:3F:5E:43:C5:77:DF:EF:E5:AE:11:CA:C1:74:9E:6B:A8:63:B6:7A:C9:7F:8F:58:EF:05:C6:35:2F:C7:D2:9B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEmAhNF1xieZjRQ10hQg3DTj1Gzz4BmGpLD9v7VvRjb0jbOjYyuVsuzJUJXgDEk%2F1afOfByQbmuG6CciOTeqTBi1DB5KTNFvc262KqI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99d67c48edc7569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"313416748803cb04ec5e7ec3f21e1c45","sha1":"1ceca32353cdd67eae607c3b6d6a3227564e253c","sha256":"68fbce25fc6c17c1ef30fc8a939a38ecf03af1eaf8ce6e586e579741b1cd5f08","sha512":"59d217ecb9e15377afa1cf0aa43da6e5c3a565c4b1ef94dd5122fcc1fe3d438100ba71301c76ce28f94ca97dbb43ca3ed236baafb9b68ca6b5d16afceb7442dc","ssdeep":"","tlshash":"7a217c4a7aecc1b720c650d3ba313fa6acd3e94b490a281077fd46598bd9e51c993907","first_seen":"2025-05-26T11:38:34.345722Z","last_seen":"2026-01-14T17:10:24.279928Z","times_seen":211,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":50,"dns":29,"connect":1,"send":0,"wait":470,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"flushpersist.com/pxf.gif?uuid=250f348c-4fe4-4eda-ae85-fe2ea8028835\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3093\u0026b_frame=0\u0026pk=a032b4d33c8aea68a4f9b84235614bff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.012Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pxf.gif?uuid=250f348c-4fe4-4eda-ae85-fe2ea8028835\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3093\u0026b_frame=0\u0026pk=a032b4d33c8aea68a4f9b84235614bff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 14e5d4298cb3a5186ee6cc78d1bdae5f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":94,"dns":4,"connect":93,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: da60054fa3903256154f9170edf2f7dc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2026-07-07T20:05:43.09583Z","times_seen":15231,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":57,"dns":1,"connect":17,"send":0,"wait":22,"receive":18,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-12T13:47:57.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"animeproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 16:46:53 GMT","end":"Sat, 24 Jan 2026 17:45:15 GMT"},"fingerprint":{"sha1":"8A:07:8F:8D:27:EB:45:1D:11:3B:D3:AE:B2:1E:AC:0D:F5:4D:21:66","sha256":"70:E7:D6:B5:22:B1:BA:18:02:52:C2:00:58:44:E1:3C:49:D3:6F:E9:E1:4F:FC:DF:1B:03:90:0D:D4:8C:A6:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 12 Nov 2025 13:47:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s2%2BLxV51oKhMtamy7Yc3uQm17vm7VG2ELen75C8fIud5yoPXgfgEoANNgZBt5QaCFOCWP6q4EU%2BCbXlU8BqZR2HN58KTN%2FFfj1IoSguJuS65qetbjehetYACPdSzYd%2BRhRmpEBQdTAUAjA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 99d67bf55e470afe-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"99d67bf55e470afe\", cfL4;desc=\"?proto=TCP\u0026rtt=496\u0026min_rtt=437\u0026rtt_var=139\u0026sent=6\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3281\u0026recv_bytes=1267\u0026delivery_rate=6961538\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=237d128e5ac96f92\u0026ts=47\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7585,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7585), with no line terminators","md5":"ee7d5efbb9fa02fdb67c21dff52b2080","sha1":"2ad62f39886b1298184fb1c09032146034d67d10","sha256":"e75f060a6d6b183ea3056eacf3404c7eacf400338dc2b57107816a01c6933e2e","sha512":"f746a8ca2c0fb6b4ea974919d3287ab70493de315ca1de40c519bc498c5ef01465f86d292ce0f147e2c03479077026eb07746d3d0e424a7f840580a98c0cfbe5","ssdeep":"96:PNybXZtIEb0EFW87IVNxbci/8LyaviK7i+RSiuwgfOa72kwyVkDtf5Yzueh8w8mw:PNadBcgikGatm+3uw2b7rwyVkDtfOyYw","tlshash":"5bf18ef3e712a037d3fb43e2197766005315a26b8702c959f591ed8c93eaf1b4b2625c","first_seen":"2025-11-12T13:48:42.959685Z","last_seen":"2025-11-12T13:48:42.959685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":31,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/cdn-cgi/challenge-platform/h/b/flow/ov1/1108733656:1762953160:pzfo1kVlTJRe7Q0WrECECnKwVQHZnXUOxA2_bTvVyhE/99d67bf60c6c0afa/sWFQuesjd899XZ.7X11iVcYwpqz.yK96LHs.rlbQACM-1762955277-1.2.1.1-UHHjswWG.GuNxWDqrdgl_GZHB4e.xk1F2IkuhB6D6uAG4IFRjMUGIQ9Q.VnrnvJV","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:47:58.214Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1108733656:1762953160:pzfo1kVlTJRe7Q0WrECECnKwVQHZnXUOxA2_bTvVyhE/99d67bf60c6c0afa/sWFQuesjd899XZ.7X11iVcYwpqz.yK96LHs.rlbQACM-1762955277-1.2.1.1-UHHjswWG.GuNxWDqrdgl_GZHB4e.xk1F2IkuhB6D6uAG4IFRjMUGIQ9Q.VnrnvJV HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hdsector.animeproxy.net/\r\ncf-chl: sWFQuesjd899XZ.7X11iVcYwpqz.yK96LHs.rlbQACM-1762955277-1.2.1.1-UHHjswWG.GuNxWDqrdgl_GZHB4e.xk1F2IkuhB6D6uAG4IFRjMUGIQ9Q.VnrnvJV\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2007\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:47:58 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncf-chl-gen: QLG1d57yy6ffUwRhlilkHloRB/BAgZmHqyjCpVvQP18=$juRsrHG3HNtvAmcy6rXaGw==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iveP0wtL8AkIZVsT9jmfoCRrTQ2d8OnOl23gIkG045dgTXwfixBx9bH9%2FxDm%2F0RLRVCcQ%2F2Yq5CRpaEBqnUuybm7XtyDXGmIETd7w0juCmWm8bg8ToFXfzWm%2BWZM76%2FG4rA5dGPGMY9GAg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 99d67bf8df8276ef-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=872\u0026min_rtt=493\u0026rtt_var=433\u0026sent=44\u0026recv=25\u0026lost=0\u0026retrans=0\u0026sent_bytes=52400\u0026recv_bytes=3877\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16684,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (16684), with no line terminators","md5":"c78a667081d36fca5507f4d032b3b31b","sha1":"d3a595a137586d6d35ee1344c351e30f0d712394","sha256":"a967ece73a771435503e9a91b626ca01d6d5e8a00d076cebaaadc6e27189b402","sha512":"b25148a3b5afc5228aa065e6a0c001e77fadd48537ead715671ffe3ced9a841a50ff367464796a8e12f32b51d3c0feb5e1494ddac562c41bb17874627d4bdc3f","ssdeep":"384:VAmtY5jG2xIuFvII7w9OzVGpOAfbJAei4i+7cT7rQY6A/yl:C7hG2xJ7w9OzVo/fbJCT7sYHKl","tlshash":"5772cfd4d1bfbd83e953b97acba23e383b5666947c2dbb1881c21f19a07453c4039267","first_seen":"2025-11-12T13:48:42.961078Z","last_seen":"2025-11-12T13:48:42.961078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"heartilyscales.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.427Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32891\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e53632f5b2e36c146c0dc8ec9062cd26\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84996,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"592d58dfe567c82ba8bc43574216d677","sha1":"06cee5443503c8ffa12eb703b17688546cc8fc50","sha256":"6ab5201058835d80adf1cd70096e86e2281472a04fecdd458603247207cf0a7d","sha512":"2b537343e570f83feb23d7098d58c887b2fee2de06644f1a0c3dafcfcc99f8336156f9d5035c479a2fe71cee616ec685d3b8e0f4dc6a7459f617256458b81661","ssdeep":"1536:fMmg73s72DQsjQlZKEMO2N6BLFYQPNT41FXgKkGCWUMZL:fNgxkN4O2N6BLFYQWDXgKsWUM9","tlshash":"5483f8883f81b65812a2f133723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","first_seen":"2025-10-25T19:37:09.666619Z","last_seen":"2025-11-17T11:06:55.662455Z","times_seen":14,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":105,"dns":43,"connect":93,"send":0,"wait":100,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/themes/default/images/block-bottom.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.608Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/default/images/block-bottom.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/themes/default/theme.css\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c406da65694-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Dfe3W%2FYwdUQ85qYkH4KCV6x%2F20fk0K7fMQOMYgIXE%2BPbsDYMhT%2FPhZCGmPenQ0UzBNT22VuAGGegtpeIdrjjEegxMPCp0SQVC%2BQ4ufV7LwTk%2Fi82ZOysBTis82x5m26vtJgk%2FmSGK2TMGA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=492\u0026min_rtt=417\u0026rtt_var=138\u0026sent=7\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=5452\u0026recv_bytes=1454\u0026delivery_rate=11547049\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 11","md5":"d32dd64844ff5e90d901748168769412","sha1":"7191c2c71d9f8fddcd88d6358adc922f3aa21c9b","sha256":"e9e2e45b1d480dbf01c20170e91e92cf1ee2d8773416630b5dfc4d4aa8628762","sha512":"2555c4a93ac3564c905985339e0b997243244c02fc3cf52c946e212498e9f3a57cfeaceeb6b9cf410fb4558a2457c3cbcf9ad966d45d1bef05846ca916aabfb2","ssdeep":"","tlshash":"83b0118ae388eb80e2830230088a8082020b2302820a820ab2088300a80a22200088a0","first_seen":"2025-04-28T03:27:23.90407Z","last_seen":"2026-03-15T22:38:15.2412Z","times_seen":23,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/hollytv.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.410Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/hollytv.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c3faa485a0f-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qNp8G1xAb6Mrxx25BYgeFTGQImqI0dNuQo1%2FLjHks2FGhwtFbs4XbPaN8q9QS9Eo88hNmTmZHVDPu1fNMG8ItktAR%2B9nDpiE3jRaBR31S7B1gy1FCm0Af80Fb%2FIAc%2BinxU6wAwAezKViSw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=453\u0026min_rtt=453\u0026rtt_var=226\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=710\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"6ca93a364c89cbbd003b71a90cd7ab16","sha1":"d7db7bb13de496b5ad9321c37a21c60c9ce6fd52","sha256":"5c6fa76815f32a70de3f6b7ec28385dc4c9a586dbbbe578a79f650e691394604","sha512":"dff4c9961e330e15f86372c376e8e295efe218c0232931147c83bc28b2fcc1470f384270fd1d307879369bc627f547f281396fd30f2e6beaab885d2edb439a64","ssdeep":"96:5BkatBdObeYgkSg+oSX1pz86EQWNlGtV8YqnVhALB+7OJ/:3katBd5CU1ZREQ6lccV2Lg7OV","tlshash":"a191ae7eb864062204fd12373743e1724d9a42d88f74a3e0b466720c9efcee6a48d3d8","first_seen":"2025-04-28T03:27:23.891771Z","last_seen":"2026-03-15T22:38:15.200316Z","times_seen":23,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":131,"dns":0,"connect":1,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/themes/default/images/frame-top.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.609Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/default/images/frame-top.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/themes/default/theme.css\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c406cae5a0f-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mNTaG1%2FBDSQz8K537CoUFQMHRh6pMHou5C95CJOB2KsJPhpkAhQaFZuR5WK63xzrHdu8mjomPPsWfMUcIhoyldyX3NHA5EgFSnoLg6W4qUTz0OQxKh5fpTQpvXgysSThtwa%2F4bAaQVuiHA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=489\u0026min_rtt=453\u0026rtt_var=94\u0026sent=7\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=5445\u0026recv_bytes=1450\u0026delivery_rate=13163636\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 25","md5":"4b2b05d73919d8b893dc582994731717","sha1":"bfbe778071bdfef86c118ee7147d6e95936075d5","sha256":"a903c5fd213ac278753e286a162188ce892045441c2a449c348a07dead715215","sha512":"170a41f4fdd0767cfd4ad32c7d679471a3f851d2d0f426d3e8b5e52f8e3534b76b0a0e11ac0217ae41703e841cb4a4b37b525769dc8db86451f24f71346c0ace","ssdeep":"","tlshash":"15c02b63db2391f0c3cb20f5c80480491a484340055c000f415182000a7238f81415d0","first_seen":"2025-04-28T03:27:23.889857Z","last_seen":"2026-03-15T22:38:15.191914Z","times_seen":23,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.940Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 40223b4bdee9624a0d928016b18094ee\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":8,"dns":1,"connect":18,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/cdn-cgi/challenge-platform/h/b/jsd/oneshot/93954b626b88/0.32108844874432757:1762953160:KJoiQWtRnTlWYcHWhE8ghhnfhhlRUZZ1fCXsDxql6lc/99d67c3d7c9176ef","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.270Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/93954b626b88/0.32108844874432757:1762953160:KJoiQWtRnTlWYcHWhE8ghhnfhhlRUZZ1fCXsDxql6lc/99d67c3d7c9176ef HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 11507\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk; dom3ic8zudi28v8lr6fgphwffqoz0j6c=250f348c-4fe4-4eda-ae85-fe2ea8028835%3A2%3A1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:10 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCF-RAY: 99d67c442dd3b1b8-OSL\r\ncf-chl-out-s: 3J4v0hdtO4vA0mRXPITX5A==$Yk5CQLOEKEUHIQblZmke+A==\r\nset-cookie: cf_clearance=czjXiBKLzAYrQrvCfyjaFgzT6l1iPUdXs1C_OQK3A28-1762955290-1.2.1.1-GwY.hacHaSDAI_XtL87rfuCA0n9vcW0F24d0zmB32PBlOBENPV9hyq_7J85lUhSiQ.nxQJI0Z44tpwfdHIajrM51Sch7v7sSvsOVhNS5_x0MpEy9.FuJ1N2W2Ru9FCqHBuIRUsf8weYFWym.2kUYwX8XzSmdar5Pj0cmvoCWiv2q3gw5QUlCS9DYzC1J9Wk.PPttG.SMKG7pYoQqEBjYkhZbHgfgqA5XlWFifrL7HxIZB8.7RNWiruFebjW.77t3; HttpOnly; SameSite=Strict; Path=/; Domain=animeproxy.net; Expires=Thu, 12 Nov 2026 13:48:10 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Fh%2FLba%2FhKf9xPTP5PyYzJOm47Z4IQjw6BrP4ffkWEj4T5qCElsTrmU6xGhuiTBC21yvAgLuAMXB%2FRA3h%2B5pZPnAf1tnlylqNoMNwtXwC6QchQJ4N8LaNAu3%2BzdZ99%2BLstciEpLs5byqVxA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=765\u0026min_rtt=441\u0026rtt_var=148\u0026sent=45\u0026recv=31\u0026lost=0\u0026retrans=0\u0026sent_bytes=29199\u0026recv_bytes=16378\u0026delivery_rate=15422485\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/sweep/default/android-btn/3/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:30:46 GMT","end":"Tue, 06 Jan 2026 16:29:13 GMT"},"fingerprint":{"sha1":"CE:BB:4F:68:2C:89:90:90:9F:0D:E4:DC:37:55:B5:DC:41:49:D6:F9","sha256":"52:3F:5E:43:C5:77:DF:EF:E5:AE:11:CA:C1:74:9E:6B:A8:63:B6:7A:C9:7F:8F:58:EF:05:C6:35:2F:C7:D2:9B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpqLs8bOyTftRHqL0DpEADlV44hu4OMrmsekUHVt1J%2F7OknkDTkAUjkZZbsEv%2BX%2BuIZYOW3NihISGR2icbVtivFPXeO1k8BpOit4gZA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99d67c495e41569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"313416748803cb04ec5e7ec3f21e1c45","sha1":"1ceca32353cdd67eae607c3b6d6a3227564e253c","sha256":"68fbce25fc6c17c1ef30fc8a939a38ecf03af1eaf8ce6e586e579741b1cd5f08","sha512":"59d217ecb9e15377afa1cf0aa43da6e5c3a565c4b1ef94dd5122fcc1fe3d438100ba71301c76ce28f94ca97dbb43ca3ed236baafb9b68ca6b5d16afceb7442dc","ssdeep":"","tlshash":"7a217c4a7aecc1b720c650d3ba313fa6acd3e94b490a281077fd46598bd9e51c993907","first_seen":"2025-05-26T11:38:34.345722Z","last_seen":"2026-01-14T17:10:24.279928Z","times_seen":211,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.293Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js\r\nCache-Control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbEDAFvbt295B%2FVgKB3GLaJYw3QZCncpnTFWZYy2BmSUboSz952nTfAHr2MBwXV7LRgKXeCF8qmEjtCSSOsHP7k%2F31GOxAmI3GCRtWxawJA%3D\"}]}\r\nCF-RAY: 99d67c4a8d405a0f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":236,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.763Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/message.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdRqztuaS7p9ChkvlUhnSCrua7450bB6Gb26g2Jnee%2F3djuZFXRltiXVPZJmqB856dbq2lQtMOhemtn7yiOwJ3OLYYgf6SG1g0NwcBeo\"}]}\r\nCF-RAY: 99d67c4d7a8a569a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 12 Nov 2025 13:48:09 GMT\r\ndate: Wed, 12 Nov 2025 13:48:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"017672004526d49c616a83a1885ca6cb","sha1":"317c4a759af5149d1777a5c195c2030c842d4b70","sha256":"6ad67efe8c01a7f843a39344a43ca877e30726dd0cae6db3ce719a22a63bbc70","sha512":"f1dbb144b98e0a05fcaefd0367bb48be095ce28add6c7e8e8ac4d6b4b31dd76e2a7edaa4587bb78841aac8d679c53ba06e7a98775e9c6eaeee11c18c4f251ed7","ssdeep":"96:1OEbaNllOEbaNsFZKOEbaNWOEbaNVTOEbaNVy+aZjzBrgOEbaNIubqGIFuV4yOE6:2NlmNMNVNVkNVqbNfbqGIwV4BNdNzwNY","tlshash":"9bc1fd91041704409b835cd227ce7f34fe1f92116544d0b9abfc9b6beddbda6426836e","first_seen":"2025-09-08T23:56:02.073922Z","last_seen":"2026-03-05T16:22:21.514891Z","times_seen":5277,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":108,"dns":0,"connect":20,"send":0,"wait":35,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/pixel/sbe?t=3\u0026error=external-error","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:12.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 21:51:40 GMT","end":"Thu, 01 Jan 2026 21:51:39 GMT"},"fingerprint":{"sha1":"AC:0E:0A:1C:AA:E5:DB:3D:5E:08:F6:26:F1:1D:98:65:42:D8:4F:97","sha256":"24:D8:C8:0C:EB:CB:B6:51:7E:D6:F0:16:2A:4D:4C:93:AF:30:D4:E9:B0:FF:9D:5C:C7:9E:8F:A5:CE:E2:1A:E1"}}},"request":{"raw":"GET /pixel/sbe?t=3\u0026error=external-error HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: uid_id2=c906963e-befa-48de-87ab-c91ac896eaef:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; sleca286902791a7f4c98bcb1e812322cd78=[5967421]; u_pl22675059=1; sleca032b4d33c8aea68a4f9b84235614bff=[5967421]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:12 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 01:59:37 GMT","end":"Mon, 15 Dec 2025 01:59:36 GMT"},"fingerprint":{"sha1":"84:BD:C5:EF:9D:1D:34:8C:A0:22:2D:D2:FB:A2:D3:F5:74:5F:7A:90","sha256":"30:7E:44:EB:16:94:91:A3:8A:D6:C1:32:D3:2D:D0:B9:A7:40:77:14:44:AB:8F:B5:EE:45:E6:8B:43:50:B5:55"}}},"request":{"raw":"GET /script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10178\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10178), with no line terminators","md5":"dedd352338543b137f608adc8d0d4aa8","sha1":"100edb4e8fef9b6da043d51135077e68d2a61b22","sha256":"b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48","sha512":"e2fab4d95d5baa013a7c248945156524478341282dcffc462fb2de318f55ba29dcafba0db3abcfb6399c6164f6f630f06d48a7323b73f8ea05d5978cd60a4c5c","ssdeep":"192:ATn+ip4qxJ/gzuvu3fo8idwqnOqgStYc1qRP44+PHlCXXZE7904AxF:YbRJYz3oe+3tYGGx+NGXZCAn","tlshash":"2b22b5c9b2d2f06443d77161942f2007f23b2869b54dc498eb66e8d3bcb045ea227f79","first_seen":"2024-01-26T05:18:07Z","last_seen":"2025-12-29T12:17:25.567723Z","times_seen":3656,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":18,"connect":33,"send":0,"wait":34,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"vmuid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"realizationnewestfangs.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F3%2Findex.html\u0026l=1324\u0026fd=194","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.180Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F3%2Findex.html\u0026l=1324\u0026fd=194 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":116,"dns":27,"connect":91,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.185Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/animate.css\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQ00CLXLeaGCzoEfxp0BVjj6O3iuPM%2BOWKMjhp8PPIuqHhP4eE7bsEMEPy7o3GutWt0PF1%2FdZFEcB4MlYPGo6BGFjzBs0fbdw2a%2FBQOWiNc%3D\"}]}\r\nCF-RAY: 99d67c4a0a3ac759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":20,"dns":21,"connect":1,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/message.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5402\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8545-151a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 351051\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yw1JYcwJKTIVhF7eBnvpjmuf%2Bdku1Vmk%2FwdPTxEnJDd978T9xw%2BxVy6wwHBcyOM6oWTRc9MuJQ8Sw0%2BVhfG%2FeZUvrqDNd3RaVmrYZjG4Bro%3D\"}]}\r\ncf-ray: 99d67c4cfafa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cd733a315b8211d98f006e6ea0803f4b","sha1":"7d171c38df62cfdaa0c6ec35f8c37aa183c52b54","sha256":"ce16892d1608a82787b41a5402c081485e9af89ecfcc525a850bdf13ddce6b70","sha512":"62bbfe897924bc8210b9315fa36ac169730f98a2c338aa31189fcd0f4507afa68bbb5b1e5c4527fa645c8571583883b6eea0ac8938c312df64ea8edc72d6e44d","ssdeep":"96:MhuQ5xSlknmWIH2IsIKiHhHDH5E1opW+HriIjVPfog+AAaFh6iGVDRTyeJZ7:MEQvSlknJIKiBjHpnHriIjpTRFgiGxlD","tlshash":"23b13b84fe22de426519ea56a6f9ef035b3f52c99a81c481fcc59c57842007ed06cec7","first_seen":"2025-05-26T10:03:00.759493Z","last_seen":"2026-09-01T19:57:12.328089Z","times_seen":2515,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":43,"dns":7,"connect":8,"send":0,"wait":6,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.658Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/message.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6IMu38lUYj3jammkto1GI%2FeYknHSI5qKi3%2FRcI0TaIixmH28WPUgz9%2BJVKuS%2F57lpMWO%2Bnf%2BOS%2BTd3WYX1R8ZUq7iZgaqEYgdRA8eQU4\"}]}\r\nCF-RAY: 99d67c4d0cfb56a5-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.791Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/script.js\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iu2ppWjiCkd7As8%2Fb3Vda71bF63tB0PGvrE1jbqd8cVzMrRC%2Balo3mA20QtAxmd0AW3A4cq2Pgj2VxH3CILruki%2B%2FQrcuevoUVOBttfm\"}]}\r\nCF-RAY: 99d67c4dacda56b1-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/sdub1.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.407Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/sdub1.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c411ef676ef-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oovwR%2FawzEPzpo1nqu4nbkhl4JTBWHDbHjbEjjjUBrXLyBxwMPGAI9Tl2tU61W4V9Mea6lzFERm6tMN2eAQLZOoeQt7dXSSEQ%2FATbgKLJzOOk7urN%2Fp7xDVZFiGRiLwvmOOuE68itv67SQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=503\u0026min_rtt=462\u0026rtt_var=61\u0026sent=10\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=5287\u0026recv_bytes=2155\u0026delivery_rate=10550091\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b78735419d6b13c6c410a15c46bd928e","sha1":"b7a22e96a2539382aceeb6624bc59d5b15be6588","sha256":"a3c9ab1b3f99739edfb0e480e46aa55efaa7c9363bd4005775a70424ce3e400c","sha512":"4be10d653e7bf8a2b74c8b063e9b06472c600795b36b362faad787e330c1c7bc93effbe894392f0cad64ffbaece7ab05447ea4c7df9f17df712de0dac02d98ea","ssdeep":"","tlshash":"94515d8698286c9c4d60ea442a3d983b790a0ee74fe8c3b524604a46957576c8b1edf2","first_seen":"2025-04-28T03:27:23.884704Z","last_seen":"2026-03-15T22:38:15.213198Z","times_seen":23,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":368,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.822Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 71870a8d1750be23f622e592646cb4f4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2026-07-07T20:05:43.09583Z","times_seen":15231,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":19,"dns":1,"connect":18,"send":0,"wait":25,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXCY4aS8Gva2fQ7e%2FFQa0lHn3ZBuVmx1cPIwtLuc9CmrtEDO2yDW2JCBjI5lWfqIuZY5aRYRiotXw%2BzCKRQ0KBxDXGxUrfKJHTprMBKiJQQ%3D\"}]}\r\nage: 351051\r\ncf-cache-status: HIT\r\netag: W/\"65aa8545-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 99d67c4cfaf776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-09-02T16:10:02.170015Z","times_seen":13546,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1310543584:1762953160:b7Tv2A9YLJ75Vv3qsYpgKqbElUEZyqEmphvpY-HXUUo/99d67bf99832b51e/EE7ggV3H0bC5SH.ySUdGC2IZRzt2CWIRvsa8DnYj5u0-1762955278-1.2.1.1-EGSbslTHYio8oU00TPE33RiuhwXGrWynVMVK6kfDAfXwTo5XA9dYBMUJElnJTZWo","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2025-11-12T13:47:58.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1310543584:1762953160:b7Tv2A9YLJ75Vv3qsYpgKqbElUEZyqEmphvpY-HXUUo/99d67bf99832b51e/EE7ggV3H0bC5SH.ySUdGC2IZRzt2CWIRvsa8DnYj5u0-1762955278-1.2.1.1-EGSbslTHYio8oU00TPE33RiuhwXGrWynVMVK6kfDAfXwTo5XA9dYBMUJElnJTZWo HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: EE7ggV3H0bC5SH.ySUdGC2IZRzt2CWIRvsa8DnYj5u0-1762955278-1.2.1.1-EGSbslTHYio8oU00TPE33RiuhwXGrWynVMVK6kfDAfXwTo5XA9dYBMUJElnJTZWo\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4066\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:47:58 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: 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$OD/hGhqEn/41H33aiSGzcg==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 99d67bfc4a7fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212028,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cad05c099b2f84a1f56c0990d18f8776","sha1":"6273836569fbe0280c7d991b4851f866c58a9c39","sha256":"383325d643635eb89df44764009a43bc35d1e5af36fe748ed69e159f331e1dab","sha512":"658acbb386fb5f99320ec6e48f8c58e199c006e6bde52ce0ef6dd43cba8c636caa364b0ecab7431e706c7b1d412fd6487952372b5244d3bbdb51470cf5586a01","ssdeep":"3072:OFYIGDs+xYPVdUluZTe1E3vC5NMF+EvfXpSsFkkznG2Wllb2PkT/FY:2YIGo++PVdj1vqMF5vf5SsFs2qlbUkD2","tlshash":"c124127f7d9f4b6a84b296524bfe0c2389f446e32861959077be0f874406d3a6eb0136","first_seen":"2025-11-12T13:48:42.969207Z","last_seen":"2025-11-12T13:48:42.969207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.426Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32904\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 52a5138ef7eeda02abd066ac9e7926c7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":85034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c69f07c5611fd967d30080ed8d10c9ac","sha1":"71678535a3462120b2e9dbca969c76645dd25a10","sha256":"a987bcca411e4b8d9989d2484e5756a131a3cc55507c2b941b70d512e0c3ee64","sha512":"03eaa5bb55d996a6419a689729d81a004b56dfea5208e89e73d7044ae3e70a572ea7f1683cddb1f56babd373e0580cfead20d85b414499f2360172a07b7b9271","ssdeep":"1536:dMPD73s72DQsjQlZKEMO2N6BLFYQPTT41JXgKkGCWUMZL:dEDxkN4O2N6BLFYQ4zXgKsWUM9","tlshash":"8d83f8883f81b65812a2f033723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","first_seen":"2025-10-26T06:20:23.426208Z","last_seen":"2025-11-17T08:45:52.37026Z","times_seen":17,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":119,"dns":43,"connect":106,"send":0,"wait":111,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=505\u0026rd=505\u0026fd=330\u0026bv=25.10.3609\u0026tmpl=70","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=505\u0026rd=505\u0026fd=330\u0026bv=25.10.3609\u0026tmpl=70 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:10 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":281,"dns":1,"connect":92,"send":0,"wait":93,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.609Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/animate.css\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgFbwwtgJpW5ks9cJjJeNfzYaewwgqyyj0wO3WZqgnYekDk6YZAFyD7zgmM%2B84rmyh74i7XlZHfpfH23YcN411Tq6dnwMYmVdImzE4f5T4c%3D\"}]}\r\nCF-RAY: 99d67c4c78d4c759-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/message.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 5402\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\npriority: u=4,i=?0\r\netag: \"65aa8545-151a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 351052\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZdbAr1qaKBHJsnvz8iyOb2S8MdiDlYv15gSS2X5rShKRq90YLl7Egu4HVpQV8C2BHPxl2qG5EgmFGdcLKd5oVvCV6qmqwrGR14HOgBbud4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99d67c4dab62c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cd733a315b8211d98f006e6ea0803f4b","sha1":"7d171c38df62cfdaa0c6ec35f8c37aa183c52b54","sha256":"ce16892d1608a82787b41a5402c081485e9af89ecfcc525a850bdf13ddce6b70","sha512":"62bbfe897924bc8210b9315fa36ac169730f98a2c338aa31189fcd0f4507afa68bbb5b1e5c4527fa645c8571583883b6eea0ac8938c312df64ea8edc72d6e44d","ssdeep":"96:MhuQ5xSlknmWIH2IsIKiHhHDH5E1opW+HriIjVPfog+AAaFh6iGVDRTyeJZ7:MEQvSlknJIKiBjHpnHriIjpTRFgiGxlD","tlshash":"23b13b84fe22de426519ea56a6f9ef035b3f52c99a81c481fcc59c57842007ed06cec7","first_seen":"2025-05-26T10:03:00.759493Z","last_seen":"2026-09-01T19:57:12.328089Z","times_seen":2515,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/health/health_6.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.409Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/health/health_6.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c3f9892b1b8-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YWgvSKEtDHEK5OXQrQRFcL%2B7HP%2Bxh8UUftephjalqzm8MyWurXGWn8KVgq%2BQ2sha49xenlm%2BMD0mO7serRalDvYPjpOcyLvqEmtHEVneYOFSqfNDD9bULg1eM84eaxboLW0oK24OOWFvoA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=751\u0026min_rtt=441\u0026rtt_var=446\u0026sent=11\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=6475\u0026recv_bytes=1749\u0026delivery_rate=9669449\u0026cwnd=4\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":997,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 59 x 13","md5":"f8395e39ed0a1a4f4f5c94a4ccd44828","sha1":"50bd117d461df01b74cbab3e1159312ad223a78a","sha256":"1f066a14d7ade5eb6ee558ebc4825057b98b845ecbc2b109c0593a6c5512a69f","sha512":"01b87ccc96b333381a411d84caa16074a1824640f0fd76985659b36e28713ee30f73c40e05fb4369f77b3ad1d07c16e267cc4a0b2a58439acf41822ba4d79917","ssdeep":"","tlshash":"031150de1abce114e15b08344d884a0bf779e2738a205489799880885683bcc8a28a34","first_seen":"2025-04-28T03:27:23.879934Z","last_seen":"2026-03-15T22:38:15.202229Z","times_seen":23,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08027f1c503f409cf8a9f064a941e58d; expires=Thu, 12 Nov 2026 13:48:10 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 99d67c432fe8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"45b6c6b55a6096e4965805414a7fd892","sha1":"7c4df85b88fe14bb67db7987ad8341066198ce17","sha256":"aeebbc473d5c3847024e7559f464fb6749ebb75a5da3f794240776c90d9adfd0","sha512":"b1f0b88592d98ad44f4e4b4324c1ba6e5c8c27a72d6e2aff42c03e512e1af2c9e46f7462b28d6adbb4be0b5c1adee11d602116b672aafbb6b24cd1ccce4a2c75","ssdeep":"","tlshash":"7aa0220028a8288080000e033e0bea3a800200032008032a80e3c0003283a0c00a0202","first_seen":"2025-11-12T13:48:42.972163Z","last_seen":"2025-11-12T13:48:42.972163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":22,"dns":0,"connect":1,"send":0,"wait":41,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/93954b626b88/main.js?","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.115Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/93954b626b88/main.js? HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk; dom3ic8zudi28v8lr6fgphwffqoz0j6c=250f348c-4fe4-4eda-ae85-fe2ea8028835%3A2%3A1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:10 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CHcQDYVv7n6%2FRdV1%2Bb8qb0UjPAUnhyqd78J4hZRkUpaBnTY6Iyfw2RCusiZL80myk5UOK4fw4%2FgBLWRve%2F6XqsuSQDlI8SbrldaynbGJ3B4vItgkLtfVMDIwVQ4N1raemGb25utRn98TVw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 99d67c433d2c76ef-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1043\u0026min_rtt=446\u0026rtt_var=581\u0026sent=162\u0026recv=102\u0026lost=0\u0026retrans=0\u0026sent_bytes=189290\u0026recv_bytes=16030\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10048,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10048), with no line terminators","md5":"9582775ef596a076859c6c12edce9f91","sha1":"547c11fcd28f39b82a5e492b7f32c13af874d9ff","sha256":"0ede9f165ede17f306b3616dce5bcdfad16044cc51c3eb5efaaefd46f87f8b5e","sha512":"66aab322370aaf5aaee46630f3f9729585548d74b540847280a9acbdc3e33930728529697309fdd763723706a8d7ace1d305938ca7dd40b8ad290e1cd391c8eb","ssdeep":"192:ltgNpZ0XfCYC/KHBzlKbpczgO+vBP7gHBEO9Dm/:luYC4opczg3vN7gHOO9DK","tlshash":"8022e7cbbfc4b56102307da2247b3ec9544bcdb9804add99d264a9f4793135da40eeac","first_seen":"2025-11-12T13:48:42.973296Z","last_seen":"2025-11-12T14:12:48.781383Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cordbraghare.com/ren.gif?sid=H4sIAAAAAAAC_1RSz4scRRSuzuZkIGIMehChDx4U3En3dM_stEGia4wGYxKSSJCc6ldPyunpaqv6x-xcDAZCbo4HwWPvN5ssxkXUuxBmPSgLguPFPWQv-Q8UxJNIz44EH9R7X_EV1Pu-9-5sFgckQEH3L7-vxypJ6KlOy3Nfvq5SoSvrXrzm-l7LO-1eV2k3PO2OmmTK1_wgbHmvuO9IPtCn2p7veb7nu-eUkbEenVqwUNlO5LcirxW2W34nxMj8_24LB5Y6EOUBOQEl5k8_jm9A8RnS4bdnpR3kOnv17WGR0FwblGL7g3SQ6irF8AmMjYM43V6-hrZzQr48Ap1uLxVAl1uNAjA1J0eeewSWbi_bBCvvHXbKEsgUTBxDVc4gkxkUnYHr21DiVwJwgYuXkA7vX9SmohuHLG3YOTn6159Q1ZwcfXQS6fCb9USN3Ks6KXKlU4tRXEONZlD9GbJiF_nYgap2wfNPocQvxHv-GNLhg3d1qQZuKc0ASuy_FFCfx13RW43WAn817ATBam-Nxatd2YsY52vdmMULo1Q8A7UOiuYoB0XsoMgcDMW-G3q9kPs06MaR4GteSMNQSOZFvbbn0YivoeCNggnybAKeTMDNLWTmFgZqAlM8hL1ZwwoHNicoRY1KElSWoKIElSKocoKqrO-JxLZtfV8ktmD-sraXNainOu9v0ns678uUgJoJjKi3VPaxvQ2er0zHsRVT3STK8npKmag3swPyTGOu8-E_FgO571IvaLNQBAHvUUm7PRrGEeuF7aDT9UMWx7CqhrJHFmaM1ZyszX9GpuaEfPY7GN2FTXbB1Qpo8SJoVYPerDFOd4QymdGjjRbXQwhdI8uPIt9wNpMD8uz0yrX1h4sZ3zj-OiTfe4McBripkZkaH6kfCfrJ3ekVXZGtK7qy5LtLWa6Gakyb-V_NaS5XHrwnNyptxPmzdvLVm7whGrhzTdr8Ak2FSvuWfL2uhJDmnDZckh_O2-uSXS7szfXCpEV24fJb584PMyOtVTqdgao5eUp8Aq7m5MTfxxe7Hdz5Ajy7BZvtnXkcLAJWE7DMQdLwJ39CIvfOTP_4_myjgbIaVu6R_zSxJ3jT3kXfOKD5baTDGqWpUSY1aDKBLVameWb2zvy2_IMlzpQlxtliiUk-P_TKqn2302ZBt9fryrgr4kAE7UBEHU9GIY26YRR2kNu5Ojl54d8AAAD__9XVWvWCBAAA","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cordbraghare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 09:03:59 GMT","end":"Tue, 13 Jan 2026 09:03:58 GMT"},"fingerprint":{"sha1":"F7:61:EB:D3:87:63:39:5E:37:E5:5B:76:89:AA:51:8D:38:D2:5E:78","sha256":"5D:83:AA:A0:01:37:BC:23:75:58:BD:25:9A:7A:5A:77:7C:07:1F:D4:85:06:9F:B9:F6:5A:A4:D9:64:7B:DE:7C"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz4scRRSuzuZkIGIMehChDx4U3En3dM_stEGia4wGYxKSSJCc6ldPyunpaqv6x-xcDAZCbo4HwWPvN5ssxkXUuxBmPSgLguPFPWQv-Q8UxJNIz44EH9R7X_EV1Pu-9-5sFgckQEH3L7-vxypJ6KlOy3Nfvq5SoSvrXrzm-l7LO-1eV2k3PO2OmmTK1_wgbHmvuO9IPtCn2p7veb7nu-eUkbEenVqwUNlO5LcirxW2W34nxMj8_24LB5Y6EOUBOQEl5k8_jm9A8RnS4bdnpR3kOnv17WGR0FwblGL7g3SQ6irF8AmMjYM43V6-hrZzQr48Ap1uLxVAl1uNAjA1J0eeewSWbi_bBCvvHXbKEsgUTBxDVc4gkxkUnYHr21DiVwJwgYuXkA7vX9SmohuHLG3YOTn6159Q1ZwcfXQS6fCb9USN3Ks6KXKlU4tRXEONZlD9GbJiF_nYgap2wfNPocQvxHv-GNLhg3d1qQZuKc0ASuy_FFCfx13RW43WAn817ATBam-Nxatd2YsY52vdmMULo1Q8A7UOiuYoB0XsoMgcDMW-G3q9kPs06MaR4GteSMNQSOZFvbbn0YivoeCNggnybAKeTMDNLWTmFgZqAlM8hL1ZwwoHNicoRY1KElSWoKIElSKocoKqrO-JxLZtfV8ktmD-sraXNainOu9v0ns678uUgJoJjKi3VPaxvQ2er0zHsRVT3STK8npKmag3swPyTGOu8-E_FgO571IvaLNQBAHvUUm7PRrGEeuF7aDT9UMWx7CqhrJHFmaM1ZyszX9GpuaEfPY7GN2FTXbB1Qpo8SJoVYPerDFOd4QymdGjjRbXQwhdI8uPIt9wNpMD8uz0yrX1h4sZ3zj-OiTfe4McBripkZkaH6kfCfrJ3ekVXZGtK7qy5LtLWa6Gakyb-V_NaS5XHrwnNyptxPmzdvLVm7whGrhzTdr8Ak2FSvuWfL2uhJDmnDZckh_O2-uSXS7szfXCpEV24fJb584PMyOtVTqdgao5eUp8Aq7m5MTfxxe7Hdz5Ajy7BZvtnXkcLAJWE7DMQdLwJ39CIvfOTP_4_myjgbIaVu6R_zSxJ3jT3kXfOKD5baTDGqWpUSY1aDKBLVameWb2zvy2_IMlzpQlxtliiUk-P_TKqn2302ZBt9fryrgr4kAE7UBEHU9GIY26YRR2kNu5Ojl54d8AAAD__9XVWvWCBAAA HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: uid_id2=3a1cf6d8-9731-4533-87bf-6e89bcc76fbf:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl22675059=1; sleca032b4d33c8aea68a4f9b84235614bff=[5967421]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6fca1eef54a2c10bd369451b1e7933d6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.624Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/style.css\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M90itbneb6OIigufzYTpTdFOqxhinQi57buHSmt7oDo59%2By4HpyMKGIarZLqPxptakYvGhWYSiIZVKetkk210JLTIlXM03ghDxDSqgTlEOc%3D\"}]}\r\nCF-RAY: 99d67c4c9f6b120a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.623Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/css/animate.css\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BvPyco7tVARnVULTYfyOMMiVXTaB0MCsSp6SiZ3Xsw3T2DsIsv6bS7bEXpNOAv5F69p3497xyOICE6wNB4wM2UfbeflbpqRLYc7QqyvJ\"}]}\r\nCF-RAY: 99d67c4c9be256b1-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/health/health_10.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.405Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/health/health_10.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c3f9acb76ef-OSL\r\nAccess-Control-Allow-Origin: *\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: max-age=14400, must-revalidate\r\nPragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qBend751uGKRx4KZ2XoIi8pxJ7h1AJiwfKtFNEbj50zS6fc%2FZFhsHXI%2BW1wX2o7bGfUitiG0afzR7zCdIO2PA2PXaYBrpICaQjH37S5wdwnfIBGT1m7CdjGMfPpq%2B5L%2FilEhq1RO8o0NhA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=953\u0026min_rtt=446\u0026rtt_var=860\u0026sent=82\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=86386\u0026recv_bytes=13830\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1484,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 59 x 13","md5":"9088791de49ab20f08dbe1e9f2695141","sha1":"4be744f2a1f81a9c5770287e3721216fd97bc6e8","sha256":"353bb88adbab7e58a64929a17abc42ed8b948850baa8a50e3057c102622d3e5f","sha512":"9b28e746fddb731ff88b40c400ed7b85ec154792c43ab11bdf378e756d37eac1a6b4e049f8205e4b0fdae917265778d254588953f6285c5a6186636e80f11a30","ssdeep":"","tlshash":"c531a7ff297e4945e2f32530ce14e683be3827f58218420d798622246c3754c9b29732","first_seen":"2023-05-03T00:41:44Z","last_seen":"2026-05-28T14:39:02.498906Z","times_seen":47,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/app/apx19.js","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.425Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/apx19.js HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nLast-Modified: Sat, 18 Oct 2025 02:41:01 GMT\r\nETag: W/\"68f2fe3d-23df\"\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k4dCxNtu3s%2BNFWwB%2BR3qi2H%2FZZ7szuGqeyW2IaU0HONL%2B%2BD8bJ5eMnoWKFvBeBfcKJKH8%2BlirnjrpUVrVlAkvAjNwiUuxeKt24MgjOGFrf595hodxINy2X8ernF2B8p%2FUYAN0IYtn95GvA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 99d67c3ebdbab1b8-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=905\u0026min_rtt=441\u0026rtt_var=793\u0026sent=6\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2867\u0026recv_bytes=1042\u0026delivery_rate=2268407\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9183), with no line terminators","md5":"2344c3f05f624d595f6fb920e4d74ded","sha1":"eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1","sha256":"3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a","sha512":"b1660b062c77332a119e159c5c69d3f75d375915a33f141503232f424c4fdd990998a883c271efb94e8eb909f7837d235354ecae15b58fc23ab9d1908170e831","ssdeep":"192:yfBLCNsvzXnQQuWYQVN6nYaRB5c5FM/MR6Adpf04u7w2Br:4gNYXnrYtBONxpf05r","tlshash":"62126cc87ac7f00b53ed8a53ae1a66b8117b946362a47907d3bcf6cd15e920bc179cc4","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-08-02T03:17:50.466458Z","times_seen":3606,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msdoj.com/hit","fqdn":"msdoj.com","domain":"msdoj.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"msdoj.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 00:31:17 GMT","end":"Tue, 27 Jan 2026 00:31:16 GMT"},"fingerprint":{"sha1":"24:3D:C6:95:D8:7C:0F:F7:6E:05:D9:71:DB:8D:BE:15:4C:3B:92:CE","sha256":"0C:9E:BC:EA:67:F6:9E:73:4F:7F:C8:1D:F5:E7:D4:2C:AC:98:87:88:3F:AA:AC:79:61:82:13:14:4A:68:FD:2A"}}},"request":{"raw":"POST /hit HTTP/1.1\r\nHost: msdoj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------239310604039715332262695029982\r\nContent-Length: 1201\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: av_sw_hit=1; expires=Thu, 13 Nov 2025 13:48:09 GMT; secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-09-02T16:12:05.159309Z","times_seen":374275,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.770Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:12 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/js/script.js\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjsiOP1ODr7TEksJnoJk6f26y05srVkg%2BUxgnXJKnWKvGC7b50dGMUB9XaBctok8wma9vNzsphEn6ZWBOYebm2gs7cbhstqCqGcmu5Rpg%2BU%3D\"}]}\r\nCF-RAY: 99d67c4d8ab8120a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:47:58.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/r81ku/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 12 Nov 2025 13:47:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-PWZ3h6lVpS8Ia26e' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 99d67bf99832b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170968,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"3d9ed8b89f53b6750bd343e7080e256b","sha1":"8cc9e47dfbe62958e347a50e123911fd8bdd6aeb","sha256":"629397be20f64b00174afa3b2aee6adad7440de13a8d937175a540cffa91b533","sha512":"e0e69fe1a72da721431e6e4ec8f086ea65ffbb0cfbe239f54a7a4206ef5f35035c60f4e932e397d5d3b88996eb1aedd0b433620427b8d93ab09872b8345aea87","ssdeep":"3072:bZCxOhi20iPBd9dZdDQ510nqh2fOerKm9:bUIiTiZI10nqh27X","tlshash":"21f30a8679c939465237947c013374ebb2ae7c8d3018a81df514bce17caa75d27a3ee8","first_seen":"2025-11-12T13:48:42.977687Z","last_seen":"2025-11-12T13:48:42.977687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cordbraghare.com/pixel/sbe?t=3\u0026error=external-error","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:12.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cordbraghare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 09:03:59 GMT","end":"Tue, 13 Jan 2026 09:03:58 GMT"},"fingerprint":{"sha1":"F7:61:EB:D3:87:63:39:5E:37:E5:5B:76:89:AA:51:8D:38:D2:5E:78","sha256":"5D:83:AA:A0:01:37:BC:23:75:58:BD:25:9A:7A:5A:77:7C:07:1F:D4:85:06:9F:B9:F6:5A:A4:D9:64:7B:DE:7C"}}},"request":{"raw":"GET /pixel/sbe?t=3\u0026error=external-error HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: uid_id2=3a1cf6d8-9731-4533-87bf-6e89bcc76fbf:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl22675059=1; sleca032b4d33c8aea68a4f9b84235614bff=[5967421]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:12 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-12T13:48:09.193Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hdsector.animeproxy.net/?__cf_chl_tk=D6k3AIw4O8V6nvuP8b6_9whyd_YG4XTyAzvGH1GB5cQ-1762955277-1.0.1.1-EVhrRCJd9N2yN_PTLkvOjXrKTiCxoUFTZqIka.O1VAI\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2328\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nvary: accept-encoding\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zdHl6jfG2rHgNnjfBL1ahIbk7ge6NtRrmyBzR963Dk53DIRKKXTnk7CrJoTcEHXRUFg5IsZQZcjp%2FzQIHJS%2BNma5hRx6rxJ8Bc3y8mjOfI0Sg5B%2FjPhO3Jycf8MCpuCkHgDvCKu3I%2BwAYA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 99d67c3d7c9176ef-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3147\u0026min_rtt=493\u0026rtt_var=4650\u0026sent=65\u0026recv=45\u0026lost=0\u0026retrans=0\u0026sent_bytes=70908\u0026recv_bytes=12424\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]}],"data":{"size":98505,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1730), with CRLF, LF line terminators","md5":"d515819ffa6b9dec3bc1b807c073ffe1","sha1":"5516648baf4b0b7fd4a3ebe29d8248433671ddff","sha256":"d98adc0a5e2723f4e600783fa26d0f3eaf615e01d1b6ea00ebbff3a3b3a5a12b","sha512":"b9535fda445839c841dc77d7898088bd096d45f57c849e339bae234f8cb686d7f58bbbdab9d386cee16d386fd052a760a95ff5b949dd42666a5c86ac6d4f6a46","ssdeep":"1536:S7H5NQ4ZXz7jaMO3O+9qirtaZS3FTttW3taZ3FTteXWvStW0P5HjvjGrBneqghI9:SNjzY","tlshash":"37a34f7383c8513b015b86d66067bfeeb0f232d4c252ea24bdb54a4fc3c19a9d5153ea","first_seen":"2025-11-12T13:48:42.978908Z","last_seen":"2025-11-12T13:48:42.978908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/tvwebhd.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.409Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/tvwebhd.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c413fc15a0f-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vt0q9i24al02xOiEuOQRbINK5DwLDNndL1Df%2F1S82s9j38VsQHXzPh574CakWYIeMEdtjpQyXhBAvfIwSD7nmtX%2BV1s%2BQTW0J90LxYsiELZX%2FaMubaPK5dCxYkcvZ3f4SVEX0KnAGmpemQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=505\u0026min_rtt=453\u0026rtt_var=104\u0026sent=10\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=6519\u0026recv_bytes=2160\u0026delivery_rate=13163636\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"a25ed609824b361d91f723af2668532c","sha1":"19c47dfc82bff7cf7390482ece8c1170cf5fceb7","sha256":"c8a51cce7eaedf86a1d2ea23ad8cfa63f541b9b28b83d874739a4942ca6861ff","sha512":"5527fa8667c0374bda50eca6708e70b0999eaf62986e3ece687ff9f902b8be588f36c88e283db2e2d0905f388daf549ed21c433dd1c90f4e2db712a920783abe","ssdeep":"","tlshash":"6e617eb38ffda5f3221d953e46253085cdb7cd5d135b20f655189f21001aa6850cf473","first_seen":"2025-04-28T03:27:23.88887Z","last_seen":"2026-03-15T22:38:15.233964Z","times_seen":23,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":385,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/themes/default/images/p-title.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.610Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/default/images/p-title.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/themes/default/theme.css\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c406c32b28a-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Zp5jQrTDkDdHKUVf27omynR36dCc%2Fz%2BtX2RKtyAfrL8vTY1%2Fo%2BARuGGujyYXdglgwgQRxU8k%2FO%2F1ep%2Fa9gOvzaylH46QIF%2FEeQ2S3Jq7tNS1izL1aZsvZvD%2BjFFc6sW6eNY%2FhoX2YzgUwQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=496\u0026min_rtt=442\u0026rtt_var=124\u0026sent=6\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4182\u0026recv_bytes=1444\u0026delivery_rate=9900854\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 25","md5":"67637d5cb3b2a773200f3f508da4645c","sha1":"5932c8d8ec4ac81d736afe2519b97a7c10fe31c0","sha256":"af9eb5c4a478cfeb3b4af3f12a14f76ca7090d53bc254d8f2d97b0333cd527c2","sha512":"3ec00df79dd8031ff1846edc8fcb7598ac7702227d4403e4b2b910264dd0935b2217e915acce5594c8645cd101c53c14b18d296066147260c0f80fc7ce2a410a","ssdeep":"","tlshash":"bfc0929bf114abb6ee0b11b164889b6e3720b950916c20ba71dd4549785438331cb02d","first_seen":"2025-04-28T03:27:23.896042Z","last_seen":"2026-03-15T22:38:15.207328Z","times_seen":23,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/sbar.json?key=a286902791a7f4c98bcb1e812322cd78\u0026uuid=250f348c-4fe4-4eda-ae85-fe2ea8028835%3A2%3A1","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 21:51:40 GMT","end":"Thu, 01 Jan 2026 21:51:39 GMT"},"fingerprint":{"sha1":"AC:0E:0A:1C:AA:E5:DB:3D:5E:08:F6:26:F1:1D:98:65:42:D8:4F:97","sha256":"24:D8:C8:0C:EB:CB:B6:51:7E:D6:F0:16:2A:4D:4C:93:AF:30:D4:E9:B0:FF:9D:5C:C7:9E:8F:A5:CE:E2:1A:E1"}}},"request":{"raw":"GET /sbar.json?key=a286902791a7f4c98bcb1e812322cd78\u0026uuid=250f348c-4fe4-4eda-ae85-fe2ea8028835%3A2%3A1 HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:10 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4651\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=250f348c-4fe4-4eda-ae85-fe2ea8028835:2:1; expires=Wed, 19 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\nu_pl15816950=1; expires=Thu, 13 Nov 2025 13:48:10 GMT; path=/; secure; SameSite=None\nsleca286902791a7f4c98bcb1e812322cd78=[5967421]; expires=Wed, 12 Nov 2025 13:48:15 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 212\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 61097595c745558bb80f39b599ecf14c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5976,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"25bc760b730afaed4cd32f69a7a85213","sha1":"5aaa0f4961652e5330063b12db76341d576ba963","sha256":"c933e35385b831d5dd06c9d642a5729c4ea893127428d618cbc36d8f8f30dcc6","sha512":"09e666b2c1fbc187349909a5fcc332475701db667790a98f82ac6e143f1279ad13cc9560fa3e55777ce9d01ab913fd2dc6cb0307b3548bc509befeaaf8fd5b8b","ssdeep":"96:9zagPoZArnN+fv/Qnn1l+QkAvZIZDlOICPwf4/OXvzq9MZHP/rFUz4YTOCyvJCS:9za44fnonj+HAvZODI+cavzYM5/rFUcZ","tlshash":"cbc15c7e58241ca6ca1bad48097bcffc6cc5ad179223d5f8cc6eae9f461cd0c0256151","first_seen":"2025-11-12T13:48:42.981486Z","last_seen":"2025-11-12T13:48:42.981486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":284,"dns":1,"connect":94,"send":0,"wait":307,"receive":1,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/pyC2VvJ/alert-xxl.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 07:16:26 GMT","end":"Thu, 15 Jan 2026 07:16:25 GMT"},"fingerprint":{"sha1":"EF:64:1C:29:71:7D:F8:71:95:24:AA:07:38:6F:83:7C:BD:D5:84:21","sha256":"6E:ED:52:F6:82:45:93:34:E3:3E:85:E8:88:D8:4C:99:C3:07:8E:E9:96:05:93:39:A5:F6:39:0C:29:EE:51:38"}}},"request":{"raw":"GET /pyC2VvJ/alert-xxl.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 12 Nov 2025 13:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 5554\r\nlast-modified: Mon, 07 Aug 2023 04:09:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"8d0eed07b450044fdca282d1daf8a58c","sha1":"794e1284cdf81fd60154955c1805282ae21240cd","sha256":"baac89456a2d4dfdcdc14244fbe50a04ade7a401c82de605938a92e16f35c1af","sha512":"d1aab3205c8b00f207ea21f0996cbcfae1c9816fb73e749a4a85daf6eed19d5e40f90240c212bbe2ec17346b6e56132e467cb33c22aaf884efa910c482c304f3","ssdeep":"96:Pj88irwxhMv5KVO4+lcN+egT9cxF2gvPMdj80d7PJjOjSscgZ:PoWeGulq+eaSvUdXPFkc0","tlshash":"84b19e259de1cfcc6f774669d28af3f450520d90439276c83fdd8e710852288bc42724","first_seen":"2023-08-08T02:54:42Z","last_seen":"2026-05-08T23:58:18.071258Z","times_seen":3408,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":40,"dns":0,"connect":22,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.104.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c906963e-befa-48de-87ab-c91ac896eaef:2:1; expires=Sat, 10 Nov 2035 13:48:09 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"72bd527b2efd5bbf1fbff31133f9b610","sha1":"fc7d562447073cb3d0561dc015439d265e5354f8","sha256":"340bcec9ae19f9daf44de9087b2fc5be269d7671808f73129afa7a68820228c9","sha512":"a34bcc32af383ab4bb16d4dcc93099131abef3a0039aa57df5bc51991bd553575369e866646097ee0dfaf2d4b7e8e9a6982721ab0571fb1244bd018a253d9ad2","ssdeep":"","tlshash":"489004117111033414451504d7041cf0711000ffd011df0dd57fc1cd4450141341df51","first_seen":"2025-11-12T13:48:42.983432Z","last_seen":"2025-11-12T13:48:42.983432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":130,"dns":0,"connect":20,"send":0,"wait":22,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.657Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcRlihtW5zBWZi9CrdY97TtSAYI%2BIPCgNDbKJRbWuCtRrTdaO8sfhbzyj%2F0oSEsvvw31ZvCtgmiHErdTdnOwAo4ixgj4JfdyYS9tNK1E\"}]}\r\nCF-RAY: 99d67c4d09f6569a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"172.67.150.150","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-12T13:47:57.763Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Wed, 12 Nov 2025 13:47:57 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=T05DVR6UGiNXqO3BFNOvTr%2Fw1VexAg6pZ592Ks0w4zu4Q2VT1cyfHTzYZ3Z1aPqdSyVfdX7VYAGL4KymAsAts41nqdJ8%2FO88IiwHI%2FydAGYjhCWDhKfLPPXe%2FJLL4941Eqjcv0TkpkyW6Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 99d67bf60c6c0afa-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"99d67bf60c6c0afa\", cfL4;desc=\"?proto=TCP\u0026rtt=476\u0026min_rtt=476\u0026rtt_var=238\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=408\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5345,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5345), with no line terminators","md5":"76b03f92b29e0faa2e19492e732ebd0e","sha1":"8de76f0dc6d9e361aa09c366e07971489e595b95","sha256":"633211f4cdf7d5cee7e6ba24ae41c2e403ab0c8dd61c9ce0c3248800f0ab3633","sha512":"178eeb5b8e8e07bc9129a9564965eb61f2844cf777447ba350901cac87b5975ebc403e3e851ee7a23cf19771a2d4ce2768b3caa084e705be3a37759e7dbcb05e","ssdeep":"96:PNybXZtIEb0EFW87IHuMbsln3QOWaUFck46T+RNzX0xYzueh8ozmw:PNadBAuMbslf3W+Amyeyw","tlshash":"23b14ce29a136023a3be4aa650a7b314a3105547c702d59ce880de9c97dee47495d7f4","first_seen":"2025-11-12T13:48:42.984623Z","last_seen":"2025-11-12T13:48:42.984623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:41:33 GMT\r\nexpires: Fri, 06 Nov 2026 09:41:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 533196\r\nlast-modified: Mon, 08 Sep 2025 18:08:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-09-02T12:26:34.75508Z","times_seen":47831,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":53,"dns":0,"connect":7,"send":0,"wait":8,"receive":2,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.104.31","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=250f348c-4fe4-4eda-ae85-fe2ea8028835:2:1; expires=Sat, 10 Nov 2035 13:48:09 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"cf50bf58dc32309bacb4b8ff33786fe2","sha1":"eb1527737962dc3eefb95bab519884514a85002f","sha256":"268b526c6e5125566021bb0c5719f1b02c6c9931f780761171021359b176c537","sha512":"622a7a2dedef870790319c2423d1ea350f99b784c3344df837eac91dfb66b7a9c0e0f475c504b8e55eb3bf02b8dc07012c85f002f15c80529c9482b31a7899ce","ssdeep":"","tlshash":"8690045d374404115c03441307055dc34d10df4c5473401c1c70c75f100dc73d0040c0","first_seen":"2025-11-12T13:48:42.987143Z","last_seen":"2025-11-12T13:48:42.987143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":130,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"flushpersist.com/pxf.gif?uuid=250f348c-4fe4-4eda-ae85-fe2ea8028835\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3093\u0026b_frame=0\u0026pk=a286902791a7f4c98bcb1e812322cd78\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.010Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pxf.gif?uuid=250f348c-4fe4-4eda-ae85-fe2ea8028835\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3093\u0026b_frame=0\u0026pk=a286902791a7f4c98bcb1e812322cd78\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 672fba6d1d0893e57935206b3c73de0d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":94,"dns":4,"connect":91,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/pre.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.406Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/pre.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c411e545694-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sz9oMh9%2B5pu1X9ugjuPvO1aE5TUr5RSnWBENceouGI5EdaOI9uk9rGeJwB36Y914ZbdIUrRimc5aZnaKnN%2BWd1JKXzDO23r1Ib6CS3ODP2gVmhTuY6T3vghkIcYq%2F5gm7VqPdGuFQo5l9g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=509\u0026min_rtt=417\u0026rtt_var=138\u0026sent=10\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=6477\u0026recv_bytes=2160\u0026delivery_rate=11547049\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"6a2676cc811cd30da63ea4fc32baa7ff","sha1":"6d9bd6d41a21fcda3fef5cbfb8505a27a74feab7","sha256":"e125873841f5143b7a14d88841c11873550818f3e6e2ecc021aa04f8d7151213","sha512":"a51704c2b85a413f91c55934bbd17d1c4566ca810e2a9b05d9f6151002fcaf874ba340369f4c8881e5f47b2621a8425795f18c609dc27ee6d255e2dc3a9f7340","ssdeep":"","tlshash":"5e613a837562150ffca2466320ebdaebd9baa1e36750b075983256f0ffc0b0c2876200","first_seen":"2025-04-28T03:27:23.87177Z","last_seen":"2026-03-15T22:38:15.211824Z","times_seen":23,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":367,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.289Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css; charset=utf-8\r\nVary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nAccess-Control-Allow-Origin: *\r\nTiming-Allow-Origin: *\r\nLink: \u003chttp://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nExpires: Wed, 12 Nov 2025 13:48:11 GMT\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nCache-Control: private, max-age=86400\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nCross-Origin-Resource-Policy: cross-origin\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nServer: ESF\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16728,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"39dc787548516ec620f30a5500133586","sha1":"b8d01180527e921595aa6b5642e2a2fb038f676b","sha256":"2e46c7278a0bbcfc47d46f5be5e56a8f3d59e69c1460e2a7866c567a9cbee3ad","sha512":"2d7760790bb9964b499edd23d6e6a88dbd52db0bced113809288fab47ab137569988af9adf430b42f680899ef0d6edd692378982f7844f8975fb0da8d76ba6ae","ssdeep":"384:YwfownwGwqwyzw/qY49wvwPwYwf7wswlwRwyAw/qY4ew0wUwvwfEwDwSw+wyXw/K:YL6TxfzQwYU14hgKfAQjrPiPO39fXQMP","tlshash":"9d720090041740009b839ce223cebf31fe5e92517151d0b9abfd9b6bedcbc5652693ad","first_seen":"2025-09-09T00:45:14.506759Z","last_seen":"2025-11-17T08:45:52.402875Z","times_seen":115,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":20,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/FLAC.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.416Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/FLAC.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c3faad076ef-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0K9Sn5HXPM0xBhx8%2FzazxFqU60gdmJn2JGEOSZftMvnlHN7e7iL0XomTBZMLBhdKJlAxjhLLo0YyxSl3mv7vlxy7JfoL%2FU9KL%2BK41HjVkDZX39UkUcL14WpaL7c7H9WUpctLOa7lgSaSpA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=483\u0026min_rtt=483\u0026rtt_var=241\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=707\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"31656a5b3baec1cac835c54c2ff1efe2","sha1":"4042cc2fc5f4767f12d469ee1433665fbca3ea8d","sha256":"fdfda5f6a39adc055d46a428f3945a0d59ba1c1a1b2d5c4f504fef3b35a1bec2","sha512":"4e55a553681f3f3711be7601e529d90385ca24b62fbe8c00781c6a4eb01fadc3a809238ad9ee6502358ee9df1a6eb15ac4fb2fa4ddd49f7cb0004d8a253e0061","ssdeep":"","tlshash":"f1615d4152841b2c14561a281e6f4feaee9323fe2b0542b6edd5f24543c357750f4c6e","first_seen":"2025-04-28T03:27:23.900654Z","last_seen":"2026-03-15T22:38:15.190563Z","times_seen":23,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":126,"dns":0,"connect":1,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/93954b626b88/api.js?onload=cwlZd3\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:47:58.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 18:59:09 GMT","end":"Wed, 21 Jan 2026 19:59:05 GMT"},"fingerprint":{"sha1":"62:5E:2A:E5:F4:DE:73:E8:94:15:72:65:28:EB:70:25:A8:D2:E7:61","sha256":"2D:41:D6:2B:6A:BB:89:80:01:28:9F:35:0B:2B:F4:6C:0D:B6:B1:E4:7E:E4:AC:35:2A:E0:69:DB:94:45:F7:D3"}}},"request":{"raw":"GET /turnstile/v0/b/93954b626b88/api.js?onload=cwlZd3\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:47:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Tue, 11 Nov 2025 16:01:18 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=MRoN2MLqj66tj3GXU9f527VGKE5AresVAf03wkQ6EGE-1762955278067-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 99d67bf79a7c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49559,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49558)","md5":"a9d82640b55b86321c027701e0ceb0cd","sha1":"80c36def1db4274f5dd45171c3e707de83797e72","sha256":"6cadddf1717be85c3467494943718b22cc3b75cfdfc4b972d5fdafc0a659f529","sha512":"3b7fca2af25c467c952ace012edceeaed7514287ef2f61e8521929f26a1fe73cd524df190650a1620d4736d9c37226d0de278e2a4f9312c2728cc2c9325227a6","ssdeep":"768:/C6j02IMgj8LUU6FObbgFZsuAz7Ww5jMSmLLNY1d9V9tGcpfBgQf3MVuY8t:42Jgj8LUU6FKXuS7Xm2Dt","tlshash":"89232a583256797226d980e1a17b63437326753ae94ccc50e423d836367cecad233fba","first_seen":"2025-11-12T10:24:47.538879Z","last_seen":"2025-11-22T14:46:39.317283Z","times_seen":5703,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":51,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cordbraghare.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.428Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32887\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 405a9067ca1cb0ecc45b6c25b581166b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85012,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"20694a42d41f4e85ebc87747c57e9480","sha1":"9f26ce0cfa093e21d626982c660c09715c6988f3","sha256":"bf4c69faaaf9e92e4dbc8d438db30a3bc58eea6242296ad3e779e3a1a04e5d46","sha512":"ba1a07ad494f29ad8cd5253ea9c68a94272d26cadfd04999ca6ae014b1b2358f380d5eceb726c3747bebb06acf075aa13de2a10fa0968fb4e5aba9c92a5cbcb1","ssdeep":"1536:fMfD73s72DQsjQlZKEMO2N6BLFYQPNT41FXgKkGCWUMZL:foDxkN4O2N6BLFYQWDXgKsWUM9","tlshash":"e283f8883f81b65812a2f133723f999ae1da5e451888d054d303a8dcbf7d71ce93af65","first_seen":"2025-11-11T10:35:31.370101Z","last_seen":"2025-11-17T12:13:48.263101Z","times_seen":22,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":73,"dns":13,"connect":91,"send":0,"wait":96,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"matomo.hellohi.me/matomo.js","fqdn":"matomo.hellohi.me","domain":"hellohi.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.628Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: matomo.hellohi.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCxrj1ZS%2BDXiPEMLu5vFoeWZoeVzenunkzIgBSeF7AOUtHqH6A037oKqGnX6SUrdlwtAX7KYR%2FyblLBOYggYBQlLZdjRVr9LXpdM4BAE9iTc\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nContent-Encoding: gzip\r\nCF-RAY: 99d67c406da432fa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":35,"dns":34,"connect":1,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/sweep/default/android-btn/3/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:30:46 GMT","end":"Tue, 06 Jan 2026 16:29:13 GMT"},"fingerprint":{"sha1":"CE:BB:4F:68:2C:89:90:90:9F:0D:E4:DC:37:55:B5:DC:41:49:D6:F9","sha256":"52:3F:5E:43:C5:77:DF:EF:E5:AE:11:CA:C1:74:9E:6B:A8:63:B6:7A:C9:7F:8F:58:EF:05:C6:35:2F:C7:D2:9B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikWB1pf44hvdxQjfzf8dlb4Vnbmc3Se2qkmQv8bt1ssEihhltqHo5JE8BjJxEZA8IOAxuMdIEdRFOJLD6MlnSZrE7%2B7UY0rETWTWxSc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99d67c48edc1569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"313416748803cb04ec5e7ec3f21e1c45","sha1":"1ceca32353cdd67eae607c3b6d6a3227564e253c","sha256":"68fbce25fc6c17c1ef30fc8a939a38ecf03af1eaf8ce6e586e579741b1cd5f08","sha512":"59d217ecb9e15377afa1cf0aa43da6e5c3a565c4b1ef94dd5122fcc1fe3d438100ba71301c76ce28f94ca97dbb43ca3ed236baafb9b68ca6b5d16afceb7442dc","ssdeep":"","tlshash":"7a217c4a7aecc1b720c650d3ba313fa6acd3e94b490a281077fd46598bd9e51c993907","first_seen":"2025-05-26T11:38:34.345722Z","last_seen":"2026-01-14T17:10:24.279928Z","times_seen":211,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":53,"dns":34,"connect":1,"send":0,"wait":122,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/hdrip.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.413Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/hdrip.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c419ed05694-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r5FFBY6rLq%2B%2B4nLK8233gFK4oynrY4BLZFiag3iEOu%2BsADJzGAAm6bcdqtfHcsJkk4LE9Bo4nnJfqW5G4QRMXF6zlqsHn%2Ft%2BgsRPezx%2B2ODjHcgnrDpEb0fUUEaDbyBpJLFGuiXmQ8ODUw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=590\u0026min_rtt=417\u0026rtt_var=266\u0026sent=16\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=10851\u0026recv_bytes=2868\u0026delivery_rate=11547049\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c3dac60914ea17101fc71cac34b37d99","sha1":"5b8c8a3a3aba1a74f602a816b7aa29f4cfdf8e7e","sha256":"f780f38d15235a8eb657c7edc90b194e6551b9b73d4e3d8245de4dea2cba1e54","sha512":"209619af3c43ff1978b6e3951cf06fa6f1fd9e2eea8a4d0bcaeef0313572a5b7d3a7013b3c370acdaec83fd144c39f722bd9b0c5e8af6ad009ee7223ed48cb48","ssdeep":"","tlshash":"ea413ae79e9b08ace37173e0f9fae909a7c01432c317958c0c0a8e3a8693e54045cf13","first_seen":"2025-04-28T03:27:23.906032Z","last_seen":"2026-03-15T22:38:15.21423Z","times_seen":23,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":441,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/icon_download.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.404Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/icon_download.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c410ece76ef-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zMuhjrMNqXLM6b%2F6dlqabyALZwST0tMS6XPmF1iJ3BkbHLSyTmykjUChzSOr78YPydaXtcz4Ii7mMHG2ebblrqnvAKmmcFWTwYuBn1tjqkR%2FQX%2BudbBx%2BBF%2FJ%2FYbMSfFQqIBekxMtayeGQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=887\u0026min_rtt=446\u0026rtt_var=564\u0026sent=89\u0026recv=65\u0026lost=0\u0026retrans=0\u0026sent_bytes=89964\u0026recv_bytes=15270\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98342,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":116,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"kettledroopingcontinuation.com/1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.789Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3422\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f629f2aedf61e69f32c50c15a8b00b58\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6461), with no line terminators","md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":91,"dns":0,"connect":92,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x3os.com/5/9914495/?oo=1\u0026js_build=iclick-v1.1616.0\u0026userId=08027f1c503f409cf8a9f064a941e58d\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:10.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"x3os.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 05:23:11 GMT","end":"Sun, 28 Dec 2025 05:23:10 GMT"},"fingerprint":{"sha1":"4C:6E:3B:CA:38:7D:B2:00:EF:B4:4F:88:9B:3E:29:55:91:FE:AF:0E","sha256":"D2:5C:87:BC:0F:B8:02:33:A0:8D:AD:46:BB:C5:BC:CF:EF:1B:AA:A6:7C:F2:DE:D3:6F:DC:A2:89:AC:97:C0:87"}}},"request":{"raw":"POST /5/9914495/?oo=1\u0026js_build=iclick-v1.1616.0\u0026userId=08027f1c503f409cf8a9f064a941e58d\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: x3os.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2937\r\nOrigin: http://hdsector.animeproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Wed, 12 Nov 2025 13:48:10 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: http://hdsector.animeproxy.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"758ff964ee78d0c90f3a14d8d4af8ab3","sha1":"f248d30ac9849b0ead400537632beb02c9c703d1","sha256":"00e3fbbf542561da72fdc5ea89cfd1405c17739dd49210252e611c3122018efe","sha512":"6e24902fb4b9391c2a98b8cc2fa4bcc2a4793cbb591cf8670ffc1f50ba8b3dda2fe350b83a0ff5f3c8631bd66980ac4d8cb9c56bd2d8c891f0491d20c2fa5b6b","ssdeep":"","tlshash":"cf40000000030000c0000300300300000000000000000000000c000c00000303000000","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-08-16T05:02:15.741761Z","times_seen":2148,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":117,"dns":28,"connect":26,"send":0,"wait":29,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.292Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/message.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/message.png\r\nCache-Control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJeJK5ssCFldHaED8v8atAyGhVhwwrbAZvWi0Mykn7nZlyiJHJpI1sEhWUwR0hmxLV1hsjotReDi6yRaUaFS4%2BIe1YJfzfV8DbaD4kG%2B\"}]}\r\nCF-RAY: 99d67c4aefc6569a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":49,"dns":0,"connect":1,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/icon_rss.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.417Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/icon_rss.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c40ed74b28a-OSL\r\nAccess-Control-Allow-Origin: *\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: max-age=14400, must-revalidate\r\nPragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kuHhliyqGMr4R%2B8ArfHm9AEFIB6iyJ7Rfub7HtjdKmB1uxN%2Bu%2BNrXCMjA0Z26QEGLIioncpFT%2Baux1%2B4T%2F7bqV3egHoE%2BQDbGNYVhDOddWhMqT77dqTwsSTuFkYFM7qN56Rfeyffb%2FV3Xw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=511\u0026min_rtt=442\u0026rtt_var=122\u0026sent=9\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=5271\u0026recv_bytes=2144\u0026delivery_rate=9900854\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1045,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"2cbd1576906e2cb77f76f60eee51619a","sha1":"5b4177836d87917c0d64ea858682b3780dea676a","sha256":"b01b7af183b79b46b9e492bf319cb399290eab26e67748021529fb1a8db27d4d","sha512":"de649c18a74441d2ee7d53bb1e0e937d7c7b065f7ab8b04ac19e3f52e953815546e78eedb60d9ead957172805c585d15ad3099b6be6de7df6ef1d8a02070a189","ssdeep":"","tlshash":"5b11252711d0c6a4f273d7b29140758c8aba9e426dc2d51df4281cda4d8c415485137d","first_seen":"2023-05-03T00:41:44Z","last_seen":"2026-07-28T20:06:33.612234Z","times_seen":51,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":329,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/themes/default/images/menu.gif","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.605Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/default/images/menu.gif HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/themes/default/theme.css\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c405d0676ef-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qs2m0SvhF1luLl1sfndfVYPCNnR2xjvLq8F8BBQjp%2FWjHz6rPsMqVpjBgOedslYvu7nmep3df3STegFRD%2Fwqs4RShOCBAlmSvnZB8%2Br5fVh96L%2FGGxWQFT71LitASSfHM02%2BHvBTBeH%2FsQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=929\u0026min_rtt=446\u0026rtt_var=639\u0026sent=86\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=88877\u0026recv_bytes=14565\u0026delivery_rate=53403582\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 27","md5":"3f7f904113d47c9ca6c9fe2a5d28a9f4","sha1":"fe828954f9d28545122ff00ca5995c86c1e4ed13","sha256":"f0633f10332e4cb30cc14cfb3f2c7fa3750b0c846c048f5045b22019634a46c2","sha512":"23f66c950e4b76dc67f5e5f9d57b0d61a9d77dbf73c30ab88c67b93b7eacb760e6cce6d337f5d2c655129ef0bf536a707855c5d5e8dcce11d0e877fe982c3083","ssdeep":"","tlshash":"e1c02bc0f1d0d801c6808070d8044505a33171124081043771bc1b84eb7c23b0086004","first_seen":"2025-04-28T03:27:23.881858Z","last_seen":"2026-03-15T22:38:15.226854Z","times_seen":23,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 20:07:09 GMT","end":"Thu, 05 Feb 2026 21:05:30 GMT"},"fingerprint":{"sha1":"D2:20:C9:EE:4B:2D:3A:82:43:E2:14:9E:C3:25:30:01:9F:8F:BB:C3","sha256":"D2:57:0B:6C:75:32:2D:6D:C0:F7:1B:32:FC:56:BA:06:7F:64:4B:FC:95:E2:29:A1:4F:59:5C:DD:D3:8D:37:7B"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 4807d3b55c87c8c8787f89d1cc2c4187\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 431\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 12 Nov 2025 13:40:58 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hI9nhfmHHt%2F%2BsWEt8ZaL3lwt527Q0liGnwn%2Bba%2B9lttIqOR0CUfCguQbfDdwiSlWmMDNb5RjmzyHM%2B4lM1PePdVEO%2Fv%2BP%2Bb8IQ%3D%3D\"}]}\r\ncf-ray: 99d67c421d641a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110117,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9bbd21a8d2011f652f0683140025ba07","sha1":"a1676ad0d15f950bcf8d52002496ecf65624db61","sha256":"a2cdc472b4750892028825f573308284d625c2c12937ed4d36f1bfbdc9971167","sha512":"7d323284e558acdf3a799e102505010f42228d5699c2b7568aabe2baed25db9f317071a69260c1ff4bc4fc1be3655ee2a2f2e675a05ca363b69be94269bca85d","ssdeep":"3072:e2+gQaEJ1hvWwmUNYj0S0BE33BvHxB+E8v:3+DdhvWwmUiYS0C3xvHGZ","tlshash":"50b319da22666459126f402405abec0d75ae8c81048dcd78f0e5fc762d78f26e3f7be9","first_seen":"2025-11-12T13:03:38.990374Z","last_seen":"2025-11-13T13:46:52.813691Z","times_seen":9,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":40,"dns":21,"connect":1,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/pixel/sbe?t=3\u0026error=external-error","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 21:51:40 GMT","end":"Thu, 01 Jan 2026 21:51:39 GMT"},"fingerprint":{"sha1":"AC:0E:0A:1C:AA:E5:DB:3D:5E:08:F6:26:F1:1D:98:65:42:D8:4F:97","sha256":"24:D8:C8:0C:EB:CB:B6:51:7E:D6:F0:16:2A:4D:4C:93:AF:30:D4:E9:B0:FF:9D:5C:C7:9E:8F:A5:CE:E2:1A:E1"}}},"request":{"raw":"GET /pixel/sbe?t=3\u0026error=external-error HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: uid_id2=c906963e-befa-48de-87ab-c91ac896eaef:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; sleca286902791a7f4c98bcb1e812322cd78=[5967421]; u_pl22675059=1; sleca032b4d33c8aea68a4f9b84235614bff=[5967421]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/themes/default/images/logo.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.402Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/default/images/logo.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c404a86b1b8-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JrkyMGa600ZnH7qu%2FL8BoFWa5NLYAjkMd7Ww9KzR7PHf1%2BLWkC%2FAckh5QDcSFKYZsm2uVq5MgGP30ISYYDfZy60lIO1cNbRvNxuxWroh6PeQTXTPNZsKgEo7Ic9c8FzjaaO%2Fbq68ywPZmg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=744\u0026min_rtt=441\u0026rtt_var=350\u0026sent=15\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=8399\u0026recv_bytes=2460\u0026delivery_rate=9669449\u0026cwnd=4\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 543 x 80, 8-bit/color RGBA, non-interlaced","md5":"b4fc9b04ca6898b37b7a9e1844e669b6","sha1":"9b3ac46bf0a2541e9d9bb71d2951ffbf85faca53","sha256":"bb89a42d1488f8fcdd128f59288293c8e342f63457150c0995daa950061513e7","sha512":"251c7eb450023dc237f248746980b80d00075e92a32411ab0869f70096678a5e0a9a78965092ee44e0c97cf7096742ca08dd87f51dfdab2842f911ed086284a2","ssdeep":"192:rSzpDEeo54yoSB7FrU9ghXqlEAQNZFCKDYqQSQ1JlU+20KoaRbVcn3B:eVk54fEFCi6BQNTCKDkSUXU+/cbVcnR","tlshash":"9a12affdf1d97dfa1c422a834cc1d69ca53137e9aad007222b39784a780caf96c72124","first_seen":"2025-04-28T03:27:23.88286Z","last_seen":"2026-03-15T22:38:15.211234Z","times_seen":23,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hdsector.animeproxy.net/images/categories/hollydub.png","fqdn":"hdsector.animeproxy.net","domain":"animeproxy.net","tld":"net"},"ip":{"addr":"104.21.30.49","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.408Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/categories/hollydub.png HTTP/1.1\r\nHost: hdsector.animeproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nCookie: cf_clearance=Hvsr0H.OQnbXliUmHosBG6LDNmgDCh7KvXoV.aDNxys-1762955289-1.2.1.1-lwI.YaikNsKyXzoSqgg0TW8uOcVghjf1gmg_vajtPXcrxWtRXHv3O_LHqS.YIrGxqmOM2A3fOZZ09mDeAmQVq6PN4iaXIrJh6IBecNmFHRr3gIQskg01149A3tLeiJSFcrAC_nP7zl_oFG0gbLuN.8FDYjMKpNNpwLseRJOrMGuPynRKSeEK8eI5_4A7AyFLjfy3LZnUaf2D9yxHVD6jVUfAO3L4nIwkfFMpbzA1ilk\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99d67c3facee5694-OSL\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 12 Nov 2025 13:48:09 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BD8pMHYUg9D2s0fejz8VhCGCsiOuJmxYnuCGkFkB8WhkisPg5EbADRdwNXBN4WQ324hpxzhFFqxq1MOqTsqGCRD8tyW5AGbkKlsH9HCOffGp5M5o0raLxcci846jcq%2B8GBwxgUvjAkmaig%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=417\u0026min_rtt=417\u0026rtt_var=208\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=711\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"3d22041d10f73100bebcfcc6e9ab7d2d","sha1":"e49292c709a7b965b0e803fd940f0920bdead1e7","sha256":"99142b15e6cd6eed78a6eea4fc04d73ae39eae2e618feac1ca5fa0de0b41e7f1","sha512":"ba35abf96442e1df4d8698c49a26d2895d58ebc5f3cd2b8636978b54a94daff394c6fd4cabb90c601c162a2653beb58c5ce70e67d51087e5cd04abcc16307292","ssdeep":"96:6EvxggarVxDg8pU0TRMHU6c5S0vtEcSRylu/tfmKOiAoQnVhD:3WPxU8pEHULSiEnyCFmKOz1nnD","tlshash":"96917dc77533c85434be050b36ccd579826a176582bcee0b861c86b3653bf4e4ee7899","first_seen":"2025-04-28T03:27:23.878921Z","last_seen":"2026-03-15T22:38:15.190051Z","times_seen":23,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":134,"dns":0,"connect":1,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"hdsector.animeproxy.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"origunix.com","domain":"origunix.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"origunix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 00:54:40 GMT","end":"Mon, 15 Dec 2025 00:54:39 GMT"},"fingerprint":{"sha1":"EA:4D:52:7B:A7:DC:EC:8E:C0:40:42:81:FA:8B:F0:41:1A:8A:06:B9","sha256":"D2:C4:BB:C0:BC:07:5E:9C:EA:13:D3:33:59:AD:22:BA:79:E4:4D:F0:C5:B5:9E:48:3B:85:95:0C:1F:60:60:82"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: origunix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64157,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":34,"connect":35,"send":0,"wait":35,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"origunix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":80,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:09.795Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:09 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 38f12cd1d69b967571bee46bc65eeb52\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2026-07-07T20:05:43.09583Z","times_seen":15231,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":17,"dns":1,"connect":17,"send":0,"wait":26,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"flushpersist.com/pxf.gif?uuid=250f348c-4fe4-4eda-ae85-fe2ea8028835\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3093\u0026b_frame=0\u0026pk=2200540f09f939738419313a1a090c32\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":80,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.013Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pxf.gif?uuid=250f348c-4fe4-4eda-ae85-fe2ea8028835\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3093\u0026b_frame=0\u0026pk=2200540f09f939738419313a1a090c32\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=13 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hdsector.animeproxy.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 12 Nov 2025 13:48:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dc39a3e2f7a68f9a504a4e549d9504f6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":92,"dns":3,"connect":92,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/3/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hdsector.animeproxy.net/","date":"2025-11-12T13:48:11.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 20:46:36 GMT","end":"Sun, 25 Jan 2026 21:44:54 GMT"},"fingerprint":{"sha1":"17:8B:5E:32:3A:E5:9A:3D:E5:18:EF:F0:DA:DE:C3:03:E7:2E:E2:17","sha256":"65:D5:7F:0D:8E:51:6B:E8:BB:44:A1:54:79:43:73:C4:82:1D:77:6C:11:F4:C3:70:8E:0E:AC:00:AC:1D:DB:2B"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/3/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 12 Nov 2025 13:48:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSmnUQukIHY%2F2n3w881DDAfWVumdeJsQiJJeQh5AcIIGQLlE%2F6U%2BkZvDX%2F5oMpo39ETm4E6fASgu9iH4tNTMTsQ5dHXM7xLVycEj27WJ%2FFM%3D\"}]}\r\nage: 17285\r\ncf-cache-status: HIT\r\netag: W/\"65aa8545-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 99d67c4cfae676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3011bde2653e373d1150594a8bbd06d","sha1":"e47948cdb4d6ecf6257106805e690e3bf0211317","sha256":"6499ec40e3f2ac55bf1b5c9a2dbbc212adb74114645bccac0373074f98ef8a01","sha512":"068957d81c2ca296e44c3bbfb20bc6572d79b4e4e848cb98c84bb119cb7350633a9c32d250999216e75ce05c99bac9050aa4fc1c77a359cd40f5d8d6ab25dd25","ssdeep":"","tlshash":"ee21dbcc858f223ef324ff618973166067a423f6bb19c5bcb199a8157e1cb910c48e14","first_seen":"2024-05-03T00:07:48Z","last_seen":"2026-09-01T14:14:47.865644Z","times_seen":2476,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":30,"dns":2,"connect":4,"send":0,"wait":9,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-12","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}