{"report_id":"709d31ae-1ac7-4cdc-ad65-7911c0d1991a","version":0,"status":"done","tags":[],"date":"2026-06-28T12:12:18Z","url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"104.21.49.8","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cryptorescue.cfd/login/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"title":"rescue.panel","dom":{"size":21094,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20918)","md5":"cdc928cbb7ae8be54a7249e36baa25d9","sha1":"821416e9e7522648f979ddbba52efeba94204863","sha256":"5a137f0b6bf17483c15bb4f27bb682393be73a460aa7b4648312d4738e6b87a5","sha512":"21a5769a8b3ae4d40ee730f08106a419c4e5cdf2c61a2b51a4b50aa5fd138630fb5e96ec7a0af190c8fe98505c5ff35c87512342200c0acbbe612e43ddb02edb","ssdeep":"192:3pUZulsnD/XgnqzcpmDg8UWDNNZV4/M6FS+hFYCIF2XFNBLUW/CDjYZM8ZZi+3u3:3pauia5nY3uLYMvcMDqP2SokhQnE","tlshash":"be928612e40cde2da8378eed527dbf3e10ddd277c6241468a65cca650782cb9ab97cc4","dom_hash":"domhashe1e44ebb98e56b7e87572f09149ae68f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"104.21.49.8","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T12:12:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cryptorescue.cfd","ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-23","domain_rank":0,"first_seen":"2026-06-28T11:50:58.592023Z","last_seen":"2026-06-28T11:50:58.592023Z","alert_count":30,"request_count":30,"received_data":1657618,"sent_data":14092,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/0vc3mkxrsp21_.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"daab57db7cb662b21440c7be9574417d","sha1":"bf211a6885683de32c69a1d5bfd78df64c9acd64","sha256":"94c63e89b9a55faa9b460cd8bf79099b5d8a32edaec74c4590ec3505c1ee8e85","sha512":"3ebb1153f12d54f602677c17e2498fef5cdb3f0beb0e606106b0ba1af855eaed01878b2b6345f61cff56a5f7d6bc5d2597acec49270b4906b65da3c659e54f25","ssdeep":"3072:sNLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++z:sNLtKOfGWYpyI9vGzD58nwdH++z","tlshash":"a024fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227537,"data":"","first_seen":"2026-06-28T11:51:02.395168Z","last_seen":"2026-06-28T12:12:22.121513Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/2xfzb1l19kucv.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc421381464bb7ff6645053e64e54a70","sha1":"c8286e1177c91e8e8b643303c9228f7954e89fa1","sha256":"2abec2e54fd9016515bda1b999172b082db0083273e25c21acd9c496ea06d6ef","sha512":"339f7fe12c8c142258fbee57f156b0fe850384d202b354faa5f646cf8e854f31590014cc90f5d7a4ef23a6b52356652d8757e1c3cf76903118c340c899f3543a","ssdeep":"6144:Yb68MnIF2wAeqIb6T4Y8YP/JWRYsjH0ewNxBPTfcXqDeFvu3OvFHWfn8cGFRSte0:tIFGew45YP/8RY7/rMq2Hqn8cGGwrox9","tlshash":"ab743ad476d2f47587b342a2007f150bf23d3a16285d9414f362dcdd78a988aa2bbf36","size":367645,"data":"","first_seen":"2026-06-28T11:51:02.406859Z","last_seen":"2026-06-28T12:12:22.138087Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-06-30T06:30:34.854772Z","times_seen":175416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"daea78cde4635ca04f9e326279494cec","sha1":"02c36165475c4bec8f53609a30263686884d6bdb","sha256":"a3ca15818230492f70da5742bb3970ed900f33a2e1bfa14958f6cab4f25ce7fb","sha512":"94833eb4214f69bc08ffaee6f77e900ff6e61c18479d95f0557802390ff684fb5b28f693c306d51c45e756751e88981ae1defe52d3697dac42eb18203ab278af","ssdeep":"","tlshash":"8351f84be94eea012c31cdaf462f0f7ae5d0dd368174296cb25cd9de55a5c2203c98e6","size":2570,"data":"","first_seen":"2026-06-28T11:51:02.409586Z","last_seen":"2026-06-28T12:12:22.143562Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bca4f7d19abfc9784b2b58f4e3379db8","sha1":"a8f8827205595d49fa3d582c98836008608704de","sha256":"2ec1054f48866965f3f4ebf2fbf231b67f732f439df4767a52085d382e04e07a","sha512":"831256d78b57217a27b294ca243ed4d630a644cb3af042114c75e6c0e76a2ab1b29d6518e0dabcad71473a14f0d4e88b733a3d37333ed899c27bc17a7ed3e0be","ssdeep":"","tlshash":"5c718c2e7805de4bec7e7c69023e9d3a50cc8d7b4794deb8868dce050a464b927d6dc0","size":3820,"data":"","first_seen":"2026-06-28T11:51:02.410475Z","last_seen":"2026-06-28T12:12:22.149024Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"058cccd59c2a2af240fac25187e3ef83","sha1":"580b2d48fc08d2c26ba1b021e2fc6c4a84ed3be6","sha256":"38014a947e25cb5d12aede13dfa6e728a83b246c9cff98f38a400bbb8789c0f4","sha512":"19d945b0bf69d8b210285296ed39903546863fe6632080a6ac6c9bf49105f14250237f2a52978f071027ae6e4c12ddeb0784b66f303329f6d9eccc7ee93a0cd3","ssdeep":"","tlshash":"f6b09b78e005fde555a605616525e445225f508d199414501113a155160d9151717dc0","size":112,"data":"","first_seen":"2025-10-26T16:09:51.479414Z","last_seen":"2026-06-30T02:37:50.110501Z","times_seen":1433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"145ac6504fe0652f8249d8c4bfc16b77","sha1":"1b55f5fa10864b14ae3a3ae0297675bfd96ae8db","sha256":"e5e4224341e378b5a9955bc5921bbc0cb0a2114f0fc7fb1bbdf1a05391f11e44","sha512":"1fcf605e4466dbb0fa2156a3f26c4340089e19a509a202fe26d3dfeb5ee424ee72fbd0fbf364b5e0624af3e386b6d10c7cc261a06c5b6cb5a2d256412607d15d","ssdeep":"","tlshash":"77c08090cc42cc2dc6664f261c3a1c3621dcc974074555469dd5dd281985b3105b5d8a","size":177,"data":"","first_seen":"2025-05-18T16:00:22.23178Z","last_seen":"2026-06-30T03:56:10.297395Z","times_seen":2705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d912686cc1270ab274cfb13cdd07809b","sha1":"b0a28901bad72c11bfb1c94e0458bde0cd658283","sha256":"ada954769e534b182652f6a900134cf1ff3ff37d389b2449dbe1054fef00ecfa","sha512":"baafeb74d16b08cd2b7954bbe7e9b0e1f9548c77ad14963981d7dd5d702fcd1d99a4b5058f647f544c1dc4c075b639ccfb15fa0eaca4e89e5142a1091826a7b3","ssdeep":"","tlshash":"fbf08146dc0fed06de25dd6e067e2e76c0c4cb7541649965b28cccca80b6c315bc6a95","size":610,"data":"","first_seen":"2026-06-28T11:51:02.412571Z","last_seen":"2026-06-28T12:12:22.164177Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/3e52obm-n1rr6.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00293ae0ca8cd31a62959fc462b5659b","sha1":"f3d7e501dcf18934e8c8afc0f2d3adbf22cca856","sha256":"0f792020fffcc86f5deb483f0948ed2ece67d86fccc92a0007124e4606a2bf30","sha512":"2b16feed012ab95489200047c8d65432e7404f224e6d1f732200ad8a8cd9b433fb8778ae3ed0ff0c36bb4f2a262d82d5aa5f17e6abf0799954ea14a2b3c6b417","ssdeep":"384:WKe5jm3gnYE2kCwMSXOMhNZV8nwoYqoXywWgBDBYBo0TgW0xXmf5AxQXIU:Pe5y3jSXOMhVEPUX7rMo0TB0xXU5Cg","tlshash":"1cc2e7627148beaca7cf519bc0ab442d632e291cc80d4c34b579adbc2a7554470a7fee","size":26283,"data":"","first_seen":"2026-06-28T11:51:02.403878Z","last_seen":"2026-06-28T12:12:22.107684Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/0sti2blkzjm8a.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf3c0ecb8d5cb5be0cc7079ea49e0683","sha1":"a00b75d6bd00bee760b851a5b547e14c91e7eac0","sha256":"6ae2e79212f487c64037adbacac9edf121e93dbb8fcf74873a570d8f8b9f5f20","sha512":"4c92ef19026cba5b2bb715912135727d15ab38554e183fe90ef2fd397c0107691bc6d55a35c2c9e5db94e8e738636c6058469d72caa8f61652ff360a7d09ad9f","ssdeep":"384:ja22sB1It8YaLFt8YaLnztiYx1iiSat8YaLjt8YaLGWWtO9MTrGztdt2te+0BciQ:e5Wq6iDQiWszDEv0SdV/ktLFf+Ay","tlshash":"1d82d6a1a145b8b9bf4700ed809bc01e62ed75049c0e8c34b1b5a9f927d9bc17793f9d","size":18558,"data":"","first_seen":"2026-06-28T11:51:02.398682Z","last_seen":"2026-06-28T12:12:22.115116Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/1u8kf-cumb-f7.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b724b0bd3ff588116c1616cfcee7fc54","sha1":"eacf2085bc234e72704d261b7d2a8263fc7ef9ba","sha256":"9e74aaf2b26b2eb0a892d699e1ba2c855348785046d82a8cc84c4f1e7307ebb2","sha512":"940020c1fab73633a486782d5c934482e40dab2429f6b7538f022f3cd135dd36f3cd33db4378cb558fb74284d37f777fec6652310b4da8c7f64f923138cfdddf","ssdeep":"384:Tg7vB/aTAkB8f7Fkd7mICT2eG3F4EQ0IcT7N:Tg75aMa8TFymICbG3qIN","tlshash":"2f9207a9b155f4422fa364a5507f500bf2382876286cc0b0b3e6d8f1a9f01add937fd9","size":21063,"data":"","first_seen":"2026-04-22T00:00:22.597513Z","last_seen":"2026-06-29T19:31:43.369696Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/turbopack-3fj74yst3mktt.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bceede56eac3416f8160a198e5e2291","sha1":"b4721af8c48d523714d4198b2259dffb359710f5","sha256":"d7215073d001135fe43c40fcc47d875179bce4da921f23c0fb350fb3c07aad1b","sha512":"3dd3dc5015ff9547215a8eaca1c289aa20e4ac69c0dc32f4fdf0b949faaeae46981619448f560a79d2a5c3226b5254fd0b43ec7317118e395bdeaadae54ddb55","ssdeep":"192:Q4gM9BC83Esgdo2YE0hBGElhTTND+S3sBT4fCT3cXX6hfH2:Q4gM9tgOQElTyssqCTMD","tlshash":"7022b6da37a6f07343af91ead06f4004f17944a9145d141cd3aca8eb2c354aa85e7f76","size":10580,"data":"","first_seen":"2026-06-28T11:51:02.403003Z","last_seen":"2026-06-28T12:12:22.134518Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/1ngy19qunt_cy.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ed9e0800ef8b066cd420422ac9bf5e","sha1":"55a932d03cf4cf7f4fda2815609d3ab17b90f56c","sha256":"022bc4cd1d7dee27b093142f4fd14afef14ed9e718eec3fa9511014d1e5eac0f","sha512":"54e42f0729ed189bb7072573597071a61e87f3bdc1ec815f0a0037073148b56d06c84624cb3bf320331da12241f7875f3914346e0820edbe84896a3274fd8e33","ssdeep":"1536:c3UmFJULqb5xfi3lgKlBjNKsMN8/HF9VKiAa+pkCyii1gk+eUxkD4ELBcxwIkyj:c3UmFJULqbnfi3lgKlBjNKsY8PFbKiTM","tlshash":"7b4309b43301bdf2e7ce815a60674115b32f38a5340d0828b5799cae36b5a94d1f6fbe","size":59860,"data":"","first_seen":"2026-06-28T11:51:02.396192Z","last_seen":"2026-06-28T12:12:22.110276Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/400h0s80xga8i.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"366dda5e7bc289cebb487676b9042115","sha1":"2e132f72cf8dfa78a86887410bec3752619dd1c2","sha256":"c17463bd36c97d2af620c7c2df57ba7ec442ce4189c18d998a628a61532f4de3","sha512":"bd87dc38f3c37064a88a5e6f6bed979c17b7c340c9d0fc55dabbb5b74796186a806acd9131b6e2284dc4e40e6232cb2b6404531ca826e3a61052b14655026877","ssdeep":"3072:aDPzjb93Y2RBp4OcO0y1OfZoI0tiX0is8ub:aDPzjb93Y2RBpJcO0+OfZetUs8ub","tlshash":"fbe3f6f935d2f88207ab50a6c03f0006f22c4d77189e6460e3e5ddda756465de2b3faa","size":143818,"data":"","first_seen":"2026-06-28T11:51:02.394231Z","last_seen":"2026-06-28T12:12:22.118417Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/07-hzktxqjvzd.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87aebaf42cb942a6e69a3b7614667196","sha1":"2fafc0bf898c3b5b1f5f3d7f7c8b7139a52619a7","sha256":"e4f0fa52acb0a9bda9415665fda33177adbc7828c9656918ce2e1a1be40d79c2","sha512":"096a2beb095937c0dcb7dc1813c13098c78b353d8ed843697966e8a70178046680a76d71e6eb3a068fc40b35264613313f008415366886713f47ece30b370bc8","ssdeep":"768:j8ZUMdoHqH35wGwl/v+GMd9mML03RnyidE:j+wU35dq+","tlshash":"4a33d5b572d4faa2529380f0d43f2017f23d0c7520ad7470a7e89cdb754898da6bafa5","size":53149,"data":"","first_seen":"2026-03-19T23:39:35.197621Z","last_seen":"2026-06-29T21:57:35.713464Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/256whwvw_y7jv.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca0392e4c4f2589b1d3f4d16c3b3bbbf","sha1":"d71f5c7a77c452c80d021d2ba1c8e6c8a6b646a3","sha256":"54908ec6ba6a15fb5ada20a269692e9c3452205b31b5cab630e34ea9f4ba4bee","sha512":"947514477156d7f2f47e00edd3ea2dbf5e5932c024a1a1a76d30f69d9fd6fcf1040f4762deac6a586e3c43982566d0303d8560525cb01bbbcbb3c1c6cdfa01d3","ssdeep":"768:TUosw2zQ3HSqD95hdFEA3tkB7LRCDkZqdqA6V:TpUQHp3M1VNV","tlshash":"2043d8b53291faa343db91d9c03b0012f2780c71309d64b4b395d8af799dd8992f6f69","size":57909,"data":"","first_seen":"2026-03-29T15:26:55.696122Z","last_seen":"2026-06-28T12:12:22.103704Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/0uyyfcx8ryyj9.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6e6104c537075c6ca0794539735a785","sha1":"7d1527458bfb84fa0c6ea31a101320bed74db474","sha256":"ccf689b0c65d7f194e2b9b0ef961e4d8e8f2c397804d189264490950e22dc632","sha512":"ccec3e97dc631f1bae6bcbd351e568f90717cd6a708fa24355e2c2ba7e89c24fda1053f018a7594ef9f5697e0365c0538fd45f3a774f8aa072a3b2c466baf25a","ssdeep":"768:IXGiD03s6CerE9kDuJl8rQVU+MOWXw/zR+TKDMY+4gAJn:sG8is6vDuorSU+MpXkiKDR+/Ah","tlshash":"04132a71b603257f97ef42c7d01da595ea391b11e04d4908e3e68e3e2b48aec90d6f1d","size":43896,"data":"","first_seen":"2026-06-28T11:51:02.400549Z","last_seen":"2026-06-28T12:12:22.127583Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/2md2jg5nna7pg.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1e646c8a3de4f5b762523a1ba4ba44b","sha1":"7a50260dc9a838d28cac934f81d8198877553a19","sha256":"01dc7a9cade4f94467fcfb0a38cdac0acd4fe92356a42bd3f5ce7ca71ed8cd50","sha512":"f7afe33c5898bf54e64fec1c7b18ed1389f46607cb19729f954b5184c62c02ddd4344873374a0fc7c56ba9dabd7ff0d89c8d1c8e091766d87ef4355ccced0e59","ssdeep":"768:Bsn57hgtpgfJRc1xF33bmnlDdyXWmu+7URwVYtM5lhfREJIr:y/gtpgfJRKxFKlIBb7URwKtMjhfREJU","tlshash":"1c3395a73156b67297de22db60b74891a37a144c2009002cbdbc9def7978c4650bbf7b","size":50921,"data":"","first_seen":"2026-06-28T11:51:02.404849Z","last_seen":"2026-06-28T12:12:22.136298Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:12:02.385Z","timestamp":1782648722385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:12:02 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fj6Fwpp8mLvHmqS8o0%2Fj3a%2F4G%2BGBDBF4quzT6zcfGAdicZUB7PhloK5bs9knIABwhLQ1kyXPt1wOBVOVk7VrddTBRR%2BQFjgqBCypt8P%2Fcg%2BGWebsEKkASZTE405FNTavYmNp\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c98f2ee560883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":865,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/256whwvw_y7jv.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.897Z","timestamp":1782648715897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/256whwvw_y7jv.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b2818ol-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgkovvFAurUZEKL5eva3RNe1sCEjS49oRWEcZ40q45lH1nAe5zprgNbceGBw5eq%2Bbzyi%2F9gFFa2xZ4qUx6hZaHxJesFEnCTlE%2FadBlgVB0eE0Ok0dceTPhSYykJt8Rr1u9%2BL\"}]}\r\ncf-ray: a12c98ca5fec0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57909,"size_decoded":15209,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57907), with no line terminators","md5":"ca0392e4c4f2589b1d3f4d16c3b3bbbf","sha1":"d71f5c7a77c452c80d021d2ba1c8e6c8a6b646a3","sha256":"54908ec6ba6a15fb5ada20a269692e9c3452205b31b5cab630e34ea9f4ba4bee","sha512":"947514477156d7f2f47e00edd3ea2dbf5e5932c024a1a1a76d30f69d9fd6fcf1040f4762deac6a586e3c43982566d0303d8560525cb01bbbcbb3c1c6cdfa01d3","ssdeep":"768:TUosw2zQ3HSqD95hdFEA3tkB7LRCDkZqdqA6V:TpUQHp3M1VNV","tlshash":"2043d8b53291faa343db91d9c03b0012f2780c71309d64b4b395d8af799dd8992f6f69","first_seen":"2026-03-29T15:26:55.696122Z","last_seen":"2026-06-28T12:12:22.103704Z","times_seen":53,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T12:11:55.311Z","timestamp":1782648715311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbOMfDUU3O6W4fEcNoixRPZIhrFwa0smIifise9dbbVuP4EmIGBhu8%2FaPwCVSiugdyoZmfmw3fWuMqweABB86lwmzIJaItdqB%2BQ5bVJJNEYUFz%2BVqYZexHei9GLq404D8n%2Bg\"}]}\r\nlast-modified: Tue, 23 Jun 2026 21:07:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12c98c72f8a0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9024,"size_decoded":3068,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9018), with no line terminators","md5":"63dc72249ae363d2951e7fe1f770e360","sha1":"7addba7b134746fcb6f6216fd547f8c6e5c9edd6","sha256":"2ef201333fc1aa1b63698ad72338a382da0dbde24e79bf63380db43d4d24a1c8","sha512":"bc4da987ae76662e330a7588da39bb4181bcdf4e03873ed78b1ee53c633d1bc6852e52138539efe47548647b774c582b2c59ee87873b351c447b923f171632c4","ssdeep":"96:zyUMPOICGnMHndBc0SlUR4cc/H3ZC7cg1xqzc/xmWggpnRLIUocWDfc2cm/X5UW:eUUOIan8XgnqzcpmDg8UWDv","tlshash":"ac126b5bec0aee06ac75ec6e023e5f3e90c8cd778674997ca28ccd8a1a5597607c5cc1","first_seen":"2026-06-28T11:51:02.402028Z","last_seen":"2026-06-28T12:12:22.105Z","times_seen":3,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":59,"connect":16,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/3e52obm-n1rr6.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.895Z","timestamp":1782648715895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/3e52obm-n1rr6.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b28ka3-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6GWPoy%2BdViAvNKl4WeNP7iW%2FL2EagjQrjD3HU6JH%2Fv4R3%2FIuiPHcNuur2txREFmYB27hXQDCa3bbrex9OhSUSwRKMLTdhi6Mm4dDBFU1GHLtwJ%2BpMHaWazBujOR%2BHWxwRxj\"}]}\r\ncf-ray: a12c98ca5feb0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26283,"size_decoded":10122,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26259), with no line terminators","md5":"00293ae0ca8cd31a62959fc462b5659b","sha1":"f3d7e501dcf18934e8c8afc0f2d3adbf22cca856","sha256":"0f792020fffcc86f5deb483f0948ed2ece67d86fccc92a0007124e4606a2bf30","sha512":"2b16feed012ab95489200047c8d65432e7404f224e6d1f732200ad8a8cd9b433fb8778ae3ed0ff0c36bb4f2a262d82d5aa5f17e6abf0799954ea14a2b3c6b417","ssdeep":"384:WKe5jm3gnYE2kCwMSXOMhNZV8nwoYqoXywWgBDBYBo0TgW0xXmf5AxQXIU:Pe5y3jSXOMhVEPUX7rMo0TB0xXU5Cg","tlshash":"1cc2e7627148beaca7cf519bc0ab442d632e291cc80d4c34b579adbc2a7554470a7fee","first_seen":"2026-06-28T11:51:02.403878Z","last_seen":"2026-06-28T12:12:22.107684Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/1ngy19qunt_cy.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.902Z","timestamp":1782648715902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/1ngy19qunt_cy.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b281a6s-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ujWKBMiekyvs0BpiOtsDnLy1KZ9uCMIVs0kqaf5n6so496veDJCPqLMQAGWhANSDP2NfKvOX1L2L4u%2FERahEU2fhjHDQ3a3NqdAle1YHsxIN4S%2FVB2%2FlVkfNGPgkKCq8D3x\"}]}\r\ncf-ray: a12c98ca6fef0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59860,"size_decoded":20861,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29908)","md5":"68ed9e0800ef8b066cd420422ac9bf5e","sha1":"55a932d03cf4cf7f4fda2815609d3ab17b90f56c","sha256":"022bc4cd1d7dee27b093142f4fd14afef14ed9e718eec3fa9511014d1e5eac0f","sha512":"54e42f0729ed189bb7072573597071a61e87f3bdc1ec815f0a0037073148b56d06c84624cb3bf320331da12241f7875f3914346e0820edbe84896a3274fd8e33","ssdeep":"1536:c3UmFJULqb5xfi3lgKlBjNKsMN8/HF9VKiAa+pkCyii1gk+eUxkD4ELBcxwIkyj:c3UmFJULqbnfi3lgKlBjNKsY8PFbKiTM","tlshash":"7b4309b43301bdf2e7ce815a60674115b32f38a5340d0828b5799cae36b5a94d1f6fbe","first_seen":"2026-06-28T11:51:02.396192Z","last_seen":"2026-06-28T12:12:22.110276Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:58.251Z","timestamp":1782648718251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:11:58 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D7xgIgGtM51n3JV7KEk72hNw%2B5w12l7NkkEDMN%2B0xE4d1416NQXAJkVISj%2F0vGuwXPr%2FXxH749i1jJqPTVvUg%2F5%2BhvsxX9d5tLC54vQRbB%2FioMqeyEJiMgcG1uLD8GD03Z50\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c98d91ae10883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":867,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:12:08.606Z","timestamp":1782648728606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:12:08 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91nb3J1J7FZqQUmqR6wD%2B87U9%2BeM%2BwK9kBqMCm0hapbX5s1hk6GpegiYzxPHKpkGGWTeFoVtnmzMEW4oDXnLtfmxGsI72UdkQUDSlq8GiBjU5VpL4OAF74pqLALyVYp1Btb7\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c9919cb870883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":859,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:12:10.850Z","timestamp":1782648730850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:12:10 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtFu4o3JQqqayIbETbcAfGOl9tcdti%2B4qj5choOVhXpY4YFG8Ji02EtrYe%2BJDqL0v6P647JqIabknYd56%2BbQ1LGT2Bu16zVaTsc00jBFNgL5SxSy8pVfk9rzOqYQRCHU1VDO\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c9927dd500883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":859,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/38cohnbmy55e0.css","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.878Z","timestamp":1782648715878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/38cohnbmy55e0.css HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\netag: \"djgqhdxo8b288u1q-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2ByFe04d8h%2BMUeKs853h06yl6MFD9MjyO9LPUMONfjNHGD2RA2Hi1iIr6E%2BOp%2FxYwM%2BA2U62gen%2BGxEaZX%2FNQL73Mmwak7DnBY0sO62ocIuEqg8Rwj%2BZfRQgQMq%2FdmuCMaXIr\"}]}\r\ncf-ray: a12c98ca3fe50883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412190,"size_decoded":44448,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0a3f45a6b38efc99918e288a1bf57a5f","sha1":"da213bd254e5c35f4d7cc5e6657e38b388636d6a","sha256":"6357009a74947e1ed154220ffb16664183b5b79bf1242b558f8f583d57ff2e35","sha512":"11200d78c6238c25da16633aba8c29ea0b014cb215626e3a9de6ccfa7d7f18e0f3ba16a467b4f42ff28d46084b76745ef8936cdce3965b77c0bc74ad3a32129f","ssdeep":"12288:utE9u+CUbxANND5HzscsF1fQAPWien+PCZQCYvHTYBP6ci7Afyve/96Y7:tci7AfP","tlshash":"cc94c6d0f308e93bac3baaad439cf18ca5323192ef758bf4ea49511156c7bf16a57101","first_seen":"2026-06-28T11:51:02.397242Z","last_seen":"2026-06-28T12:12:22.112603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/0sti2blkzjm8a.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:56.108Z","timestamp":1782648716108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/0sti2blkzjm8a.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b28ebi-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:56 GMT\r\nage: 1281\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XazxX8IKwDE%2BI3n0zkycjHlelj9gIjIRiJd7yi61IXRJfstM2FEfAZnnvsmlZXN9dA829A6LtGOK4sAKYwSAlUc3vAYWL%2BIS5Zd1QwdIWwCqujhn3SoD6DV4kWye8vrrwZjJ\"}]}\r\ncf-ray: a12c98cba8120883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18558,"size_decoded":6886,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18555), with no line terminators","md5":"bf3c0ecb8d5cb5be0cc7079ea49e0683","sha1":"a00b75d6bd00bee760b851a5b547e14c91e7eac0","sha256":"6ae2e79212f487c64037adbacac9edf121e93dbb8fcf74873a570d8f8b9f5f20","sha512":"4c92ef19026cba5b2bb715912135727d15ab38554e183fe90ef2fd397c0107691bc6d55a35c2c9e5db94e8e738636c6058469d72caa8f61652ff360a7d09ad9f","ssdeep":"384:ja22sB1It8YaLFt8YaLnztiYx1iiSat8YaLjt8YaLGWWtO9MTrGztdt2te+0BciQ:e5Wq6iDQiWszDEv0SdV/ktLFf+Ay","tlshash":"1d82d6a1a145b8b9bf4700ed809bc01e62ed75049c0e8c34b1b5a9f927d9bc17793f9d","first_seen":"2026-06-28T11:51:02.398682Z","last_seen":"2026-06-28T12:12:22.115116Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/favicon.ico?favicon.2vob68tjqpejf.ico","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:56.307Z","timestamp":1782648716307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /favicon.ico?favicon.2vob68tjqpejf.ico HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djgqhee7ls00k0b-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:56 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWJ%2BXnVED0l2Wpa8dxETn5MburCHHDpOqLxRLnd%2BMm%2BvpXQt8yvwGUT5wRNthnBDFk%2Fh0d574hPHSIRD1%2FmhIGSo5dy%2F5OOJUQUkT3UDpk7RAa%2FIafcmJp3QP7Ul%2BnxO3846\"}]}\r\ncf-ray: a12c98cce8700883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25931,"size_decoded":10395,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-06-30T06:44:57.174495Z","times_seen":29266,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:12:06.526Z","timestamp":1782648726526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:12:06 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0eLDMCw%2FOcOImrDs7n%2BGHGGh5R%2FZzPdVRsIhDiPyES69tnhUnweA73JZFa5zBHdQFPb071dRFrbg1m0xi0bsb8l92BclpPxoZDn%2FjYMMUBwK4F6gr8dz23bV81VBMINVfd5A\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c990cc9a20883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":861,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:12:14.996Z","timestamp":1782648734996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:12:15 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FVRScFmu0HDxNgWtDvQ2in1V%2BKIH3YdkS9R4bQ9z2HY2HCZmYv4rJ8MIyJRSPG9nfhZx1HOxQFKZNWlYiS%2BsNPnE%2BKalZErWjNmniYvpCcPGL7LR1Ck0KJ8L3BNu66jf0IU\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c9941b98b0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":861,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/400h0s80xga8i.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.887Z","timestamp":1782648715887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/400h0s80xga8i.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b2832yy-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2tVAX4yiH8oHKQw7hEMQS4UtXYHY%2BnR318d7T04fPZBbSJBLNW6Eh7SGzqAdh095dZYYTFEJFbgAVQ88GdYR4z7J%2BZsuLz4OKDEtc0EALzIp2oe4ci3PsQNDocjYtkd7%2Bo3\"}]}\r\ncf-ray: a12c98ca4fe80883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143818,"size_decoded":41429,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"366dda5e7bc289cebb487676b9042115","sha1":"2e132f72cf8dfa78a86887410bec3752619dd1c2","sha256":"c17463bd36c97d2af620c7c2df57ba7ec442ce4189c18d998a628a61532f4de3","sha512":"bd87dc38f3c37064a88a5e6f6bed979c17b7c340c9d0fc55dabbb5b74796186a806acd9131b6e2284dc4e40e6232cb2b6404531ca826e3a61052b14655026877","ssdeep":"3072:aDPzjb93Y2RBp4OcO0y1OfZoI0tiX0is8ub:aDPzjb93Y2RBpJcO0+OfZetUs8ub","tlshash":"fbe3f6f935d2f88207ab50a6c03f0006f22c4d77189e6460e3e5ddda756465de2b3faa","first_seen":"2026-06-28T11:51:02.394231Z","last_seen":"2026-06-28T12:12:22.118417Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/0vc3mkxrsp21_.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.890Z","timestamp":1782648715890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/0vc3mkxrsp21_.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b284vkh-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEMKdBTJS1wWQJ874JMDK%2F9zyv6ejxM5a4zYwOqAoZpUlWXykIecQO9AX5BONBxzj7UdUEn6nvm3OaQuqyzqWCnXRv4mXB8PkutnqwCQ4sQkPWTQoPRfiVpGpnoA8ML7XZln\"}]}\r\ncf-ray: a12c98ca5fe90883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227537,"size_decoded":74796,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"daab57db7cb662b21440c7be9574417d","sha1":"bf211a6885683de32c69a1d5bfd78df64c9acd64","sha256":"94c63e89b9a55faa9b460cd8bf79099b5d8a32edaec74c4590ec3505c1ee8e85","sha512":"3ebb1153f12d54f602677c17e2498fef5cdb3f0beb0e606106b0ba1af855eaed01878b2b6345f61cff56a5f7d6bc5d2597acec49270b4906b65da3c659e54f25","ssdeep":"3072:sNLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++z:sNLtKOfGWYpyI9vGzD58nwdH++z","tlshash":"a024fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-06-28T11:51:02.395168Z","last_seen":"2026-06-28T12:12:22.121513Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/0uyyfcx8ryyj9.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.900Z","timestamp":1782648715900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/0uyyfcx8ryyj9.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b28xvc-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCuTZEjV3FUR9I5nRFiLL1rxePBcynXdgpOsugrRZDr0kxKe1%2BNFKXbn5ZgcUEdkSmkCRyHqCRAVNzA7TM33JKo16gVmnkm7Uhh0sQebOGyOHFffZV4AEkrgwZpNms9TZN6J\"}]}\r\ncf-ray: a12c98ca6fed0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43896,"size_decoded":16022,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43896), with no line terminators","md5":"b6e6104c537075c6ca0794539735a785","sha1":"7d1527458bfb84fa0c6ea31a101320bed74db474","sha256":"ccf689b0c65d7f194e2b9b0ef961e4d8e8f2c397804d189264490950e22dc632","sha512":"ccec3e97dc631f1bae6bcbd351e568f90717cd6a708fa24355e2c2ba7e89c24fda1053f018a7594ef9f5697e0365c0538fd45f3a774f8aa072a3b2c466baf25a","ssdeep":"768:IXGiD03s6CerE9kDuJl8rQVU+MOWXw/zR+TKDMY+4gAJn:sG8is6vDuorSU+MpXkiKDR+/Ah","tlshash":"04132a71b603257f97ef42c7d01da595ea391b11e04d4908e3e68e3e2b48aec90d6f1d","first_seen":"2026-06-28T11:51:02.400549Z","last_seen":"2026-06-28T12:12:22.127583Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/favicon.ico?favicon.2vob68tjqpejf.ico","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.994Z","timestamp":1782648715994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /favicon.ico?favicon.2vob68tjqpejf.ico HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djgqhee7ls00k0b-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1281\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIqiny8x9KEk9nsVWJ%2BjKzqjfumQz2T0q2chltNXvbjWCSLk3RjECJQ%2BONMxbWi4w3u47d7zIoBd3p3OeHgFBQarv2cJVfNus%2Bs18CX80v0z7x0z5LGfJ04Mi1ODRPeW9uQD\"}]}\r\ncf-ray: a12c98caf8050883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25931,"size_decoded":10383,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-06-30T06:44:57.174495Z","times_seen":29266,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/login/index.txt?_rsc=2Md0sTUZcnjCijMr","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:56.036Z","timestamp":1782648716036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /login/index.txt?_rsc=2Md0sTUZcnjCijMr HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%2C0%5D%7D%2Cnull%2Cnull%2C16%5D\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/plain; charset=utf-8\r\netag: \"djgqhee7ls0059g-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 12:11:56 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGnUzqoJV%2B5C3ryaYSnFr6S9CsnZGC2OTlDv3g0LmMTfH%2FduXvHFSJ06l2TbAiypdjtdGie7oSTvqNAjJtocCH4AgT95lCzP%2F4XUHBqH760UG03qF8RLB7%2BRJCnxrrI2WS5%2F\"}]}\r\ncontent-length: 1672\r\ncf-ray: a12c98cb380b0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6820,"size_decoded":2533,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3666)","md5":"a8f50a2f72897259bb464bc39611b3a4","sha1":"42575e0b7ed363f4d2b13591db1cd6491310fa70","sha256":"3240f3c27e61417085be4875b6f937cbe4d752e86f596749727867966023015d","sha512":"2c3b95863ab05833a2179c43c48df7fd693cd9868e9c6113aedc335292627fd0554fbe9e1c8b1bbd3b799e76a70685a3ab89f1ef058c6ebf70a434bda5426ecd","ssdeep":"96:b5sn4t6Q7lfUHDAz/kM/VEbcKEc4kEVtgWRy:bZ6IIAz/HN10EVrk","tlshash":"2ae1ab23de0aee265d3accac152f871be18c8d3747700df8e69cdcad16885264bca1d1","first_seen":"2026-06-28T11:51:02.405889Z","last_seen":"2026-06-28T12:12:22.129525Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:56.176Z","timestamp":1782648716176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:11:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxlR5wRf5C8xbpjSE%2FEefowvHt4V00BIf2Hsh2ACUx1abpujVGs%2B5RpfNnVsmLs9Or23wABQPqY8ePX5Wly4NgF9hslHuj8HEgSy9PQCNEXfwz9MUncP%2FLlwdvRUDRJuCSc3\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c98cc18440883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":859,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/1u8kf-cumb-f7.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.880Z","timestamp":1782648715880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/1u8kf-cumb-f7.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b28g93-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGiyhJv1pKIDbiJHBCEb%2F30Iev8HpgzL94etk%2BFJ5xBYgqUkC5V8u52Dw7s8vr0YrbMRjVBI3xFb5RXJDvxLxZaxh7WqLq%2BZX0wvQCROHGO7iVuF5DiCMDhmX7aO%2Fq7M%2B4TR\"}]}\r\ncf-ray: a12c98ca4fe60883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21063,"size_decoded":8130,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17629)","md5":"b724b0bd3ff588116c1616cfcee7fc54","sha1":"eacf2085bc234e72704d261b7d2a8263fc7ef9ba","sha256":"9e74aaf2b26b2eb0a892d699e1ba2c855348785046d82a8cc84c4f1e7307ebb2","sha512":"940020c1fab73633a486782d5c934482e40dab2429f6b7538f022f3cd135dd36f3cd33db4378cb558fb74284d37f777fec6652310b4da8c7f64f923138cfdddf","ssdeep":"384:Tg7vB/aTAkB8f7Fkd7mICT2eG3F4EQ0IcT7N:Tg75aMa8TFymICbG3qIN","tlshash":"2f9207a9b155f4422fa364a5507f500bf2382876286cc0b0b3e6d8f1a9f01add937fd9","first_seen":"2026-04-22T00:00:22.597513Z","last_seen":"2026-06-29T19:31:43.369696Z","times_seen":38,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/0sti2blkzjm8a.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:56.153Z","timestamp":1782648716153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/0sti2blkzjm8a.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b28ebi-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:56 GMT\r\nage: 1281\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFwXDnmgH0OpBHLH%2B%2B4mpcGZk5yJY0TEz9NP9krvIdJWpNNxZr5js904Z2KWOQo1t9MUjUkXxHcoV%2BNPXjSYH0C9w4F9CbvMoaIo6ThDnVi6c5UFs4pXGlX06jIRfcimxiDa\"}]}\r\ncf-ray: a12c98cbf81a0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18558,"size_decoded":6888,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18555), with no line terminators","md5":"bf3c0ecb8d5cb5be0cc7079ea49e0683","sha1":"a00b75d6bd00bee760b851a5b547e14c91e7eac0","sha256":"6ae2e79212f487c64037adbacac9edf121e93dbb8fcf74873a570d8f8b9f5f20","sha512":"4c92ef19026cba5b2bb715912135727d15ab38554e183fe90ef2fd397c0107691bc6d55a35c2c9e5db94e8e738636c6058469d72caa8f61652ff360a7d09ad9f","ssdeep":"384:ja22sB1It8YaLFt8YaLnztiYx1iiSat8YaLjt8YaLGWWtO9MTrGztdt2te+0BciQ:e5Wq6iDQiWszDEv0SdV/ktLFf+Ay","tlshash":"1d82d6a1a145b8b9bf4700ed809bc01e62ed75049c0e8c34b1b5a9f927d9bc17793f9d","first_seen":"2026-06-28T11:51:02.398682Z","last_seen":"2026-06-28T12:12:22.115116Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:12:00.319Z","timestamp":1782648720319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:12:00 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pW9Y%2FN5UdJ6i92AEbf93R6%2F3xjR6Pb%2FbdEfrRRlIhsRqsOtUDIopxeLHsZsH1LgU481jpe%2FJ1R0U%2B0tGUngmoZzxsXCCaObCN2uLF%2FdAkVHk8sGJxVqN4C57iXWgYobs489z\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c98e60cd60883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":865,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/07-hzktxqjvzd.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.882Z","timestamp":1782648715882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/07-hzktxqjvzd.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b28150d-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lf7ueqnQGfj1msykTUQuy7I%2BcsPafDa%2FJaW5AnsN6pDSeT%2BXiNqjeUTDY%2B0BSz%2FU1t0tW7iprYa7pcmTRzJsiuj6PVthfLnjg0A7av9SZ2shWvEEJA%2BNDXefi7zE6Ugn5gx9\"}]}\r\ncf-ray: a12c98ca4fe70883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53149,"size_decoded":12359,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33140)","md5":"87aebaf42cb942a6e69a3b7614667196","sha1":"2fafc0bf898c3b5b1f5f3d7f7c8b7139a52619a7","sha256":"e4f0fa52acb0a9bda9415665fda33177adbc7828c9656918ce2e1a1be40d79c2","sha512":"096a2beb095937c0dcb7dc1813c13098c78b353d8ed843697966e8a70178046680a76d71e6eb3a068fc40b35264613313f008415366886713f47ece30b370bc8","ssdeep":"768:j8ZUMdoHqH35wGwl/v+GMd9mML03RnyidE:j+wU35dq+","tlshash":"4a33d5b572d4faa2529380f0d43f2017f23d0c7520ad7470a7e89cdb754898da6bafa5","first_seen":"2026-03-19T23:39:35.197621Z","last_seen":"2026-06-29T21:57:35.713464Z","times_seen":1007,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/turbopack-3fj74yst3mktt.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.892Z","timestamp":1782648715892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-3fj74yst3mktt.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b2885w-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KbL8qbudVc%2FsvlC1ZEbtu4irNsgsD1ZeKA7nxkPGBKiM44GFrmxsj0paUFTX00kTJTROl6JwOHjpG5xlGfcT8gipFQMjoVMw4OLJNyVGWMqBz1%2F0TUUGxZITMfJoD%2FyUOu2I\"}]}\r\ncf-ray: a12c98ca5fea0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10580,"size_decoded":5104,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10580), with no line terminators","md5":"9bceede56eac3416f8160a198e5e2291","sha1":"b4721af8c48d523714d4198b2259dffb359710f5","sha256":"d7215073d001135fe43c40fcc47d875179bce4da921f23c0fb350fb3c07aad1b","sha512":"3dd3dc5015ff9547215a8eaca1c289aa20e4ac69c0dc32f4fdf0b949faaeae46981619448f560a79d2a5c3226b5254fd0b43ec7317118e395bdeaadae54ddb55","ssdeep":"192:Q4gM9BC83Esgdo2YE0hBGElhTTND+S3sBT4fCT3cXX6hfH2:Q4gM9tgOQElTyssqCTMD","tlshash":"7022b6da37a6f07343af91ead06f4004f17944a9145d141cd3aca8eb2c354aa85e7f76","first_seen":"2026-06-28T11:51:02.403003Z","last_seen":"2026-06-28T12:12:22.134518Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/favicon.ico?favicon.2vob68tjqpejf.ico","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.992Z","timestamp":1782648715992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /favicon.ico?favicon.2vob68tjqpejf.ico HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djgqhee7ls00k0b-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1281\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcFNyNpzoKMZrPwHnm33y0nvgDGiFOUXUtVZlIAU%2FWzLrKrLgh1drvZ67e8C%2FLphvZ8tdln61%2FERpcm0tLUEeSiVCw0%2FlT9B04Uaabqzj6WkA8wpeLI2pFaFaMEeuyhcLwiM\"}]}\r\ncf-ray: a12c98caf8040883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25931,"size_decoded":10385,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-06-30T06:44:57.174495Z","times_seen":29266,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/favicon.ico?favicon.2vob68tjqpejf.ico","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:56.308Z","timestamp":1782648716308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /favicon.ico?favicon.2vob68tjqpejf.ico HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djgqhee7ls00k0b-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:56 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DL3xK5ZFnqc8YdrpcXjaVdOwYQDhbxJfJPN7ZRSwkxFg9qujadjZGEoxZsQTNm9kn%2FU%2BaVQekciXVTGdU1LUyEIaxes7Z0sb2ncP0BNTebqQg%2BbulFqssftU0XnG7eruiLwf\"}]}\r\ncf-ray: a12c98cce8710883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":10383,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-06-30T06:44:57.174495Z","times_seen":29266,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:12:04.456Z","timestamp":1782648724456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:12:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svFvzP63X0lHug9H9OzTGDYBdGzxEDwmiF55VaTXCUcN470qVuZi1KFdGaL1N64Wl6AmaRtNzsNT8jEu%2FB1d2R%2FKerGFYe6KEAReAk0VZsv8WvpaYpzTGcYqYTtT4U26sdTg\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c98ffdffa0883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":857,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/api/status","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:12:12.924Z","timestamp":1782648732924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /api/status HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 12:12:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UH%2Bb52cMEQO%2FhGE62n%2BbXhNC1UjnbetSE5yKbocTgML6ys%2BdxSHC2zQq%2FdNDRGIZzFmrFFPt2fSDQ9sjlEj5RmBTwYDvfRmtGbg83VcNFS42me0Xv4uzOjpGpDbHHmo23353\"}]}\r\ncontent-length: 43\r\ncf-ray: a12c9934cfb70883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":863,"mime_type":"application/json","magic":"JSON text data","md5":"0e33634dbb41da5eb397210314815b6b","sha1":"e3e264f2665d1a0164622cf0d15598d8d1b98ebe","sha256":"ef4df4d275bc5fb606cb7574497679d29117de1f3621642f04bfbc99a3544ba6","sha512":"59d429a5baab49cf6e0cb5031d72a7000598b89ebb6b22df3331f751552a02e05d4009a0ab52abae60e1df0c1c0056a2b72674941ba890bfe4dc9ad94cb7bb1b","ssdeep":"","tlshash":"ee9002195048024a1c5106109514d420064140806a1418048950a4aa394744a4623941","first_seen":"2026-06-28T11:51:02.391656Z","last_seen":"2026-06-28T12:12:22.101225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/2md2jg5nna7pg.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.904Z","timestamp":1782648715904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/2md2jg5nna7pg.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b2813ah-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZSXqGNX9%2FIIrfHJ3tuZare053f9A74BYgBPhuAh649AZO9HBNcO64LiE%2BXltnenVcOGV0m9JphLFbxPJtZT2cdH%2FmlWFtFAZLKg04MUjNLNcHAcAhhwf2KM4JjU%2FFduoggH\"}]}\r\ncf-ray: a12c98ca6ff00883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50921,"size_decoded":16059,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50921), with no line terminators","md5":"d1e646c8a3de4f5b762523a1ba4ba44b","sha1":"7a50260dc9a838d28cac934f81d8198877553a19","sha256":"01dc7a9cade4f94467fcfb0a38cdac0acd4fe92356a42bd3f5ce7ca71ed8cd50","sha512":"f7afe33c5898bf54e64fec1c7b18ed1389f46607cb19729f954b5184c62c02ddd4344873374a0fc7c56ba9dabd7ff0d89c8d1c8e091766d87ef4355ccced0e59","ssdeep":"768:Bsn57hgtpgfJRc1xF33bmnlDdyXWmu+7URwVYtM5lhfREJIr:y/gtpgfJRKxFKlIBb7URwKtMjhfREJU","tlshash":"1c3395a73156b67297de22db60b74891a37a144c2009002cbdbc9def7978c4650bbf7b","first_seen":"2026-06-28T11:51:02.404849Z","last_seen":"2026-06-28T12:12:22.136298Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptorescue.cfd/_next/static/chunks/2xfzb1l19kucv.js","fqdn":"cryptorescue.cfd","domain":"cryptorescue.cfd","tld":"cfd"},"ip":{"addr":"172.67.139.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptorescue.cfd/","date":"2026-06-28T12:11:55.906Z","timestamp":1782648715906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptorescue.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 17:14:18 GMT","end":"Mon, 21 Sep 2026 18:11:59 GMT"},"fingerprint":{"sha1":"C2:E2:50:25:D5:A8:0F:3F:9E:EB:11:E6:DE:D2:CC:96:06:A9:FB:ED","sha256":"7D:E2:B5:6C:52:92:9B:97:77:99:47:B7:24:F5:AC:6D:AB:17:F2:DF:DB:E7:A9:CA:C6:FE:79:8E:82:6C:24:57"}}},"request":{"raw":"GET /_next/static/chunks/2xfzb1l19kucv.js HTTP/1.1\r\nHost: cryptorescue.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptorescue.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"djgqhdxo8b287vod-gzip\"\r\nlast-modified: Tue, 23 Jun 2026 21:07:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Sun, 28 Jun 2026 12:11:55 GMT\r\nage: 1282\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KzzlrSDABMrGMe3KpixnmFYFuXNAUZy%2B7SX4M9z32FhxrjkSA%2Bz5sZmr1rxuFq1KlvcRpyUjCHc33q0NvLeFhy7PBy8zdrnW%2BdUExt35HeQGruceuKnu6xX%2B%2Fdatt3UjtSt\"}]}\r\ncf-ray: a12c98ca6ff10883-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367645,"size_decoded":111249,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"dc421381464bb7ff6645053e64e54a70","sha1":"c8286e1177c91e8e8b643303c9228f7954e89fa1","sha256":"2abec2e54fd9016515bda1b999172b082db0083273e25c21acd9c496ea06d6ef","sha512":"339f7fe12c8c142258fbee57f156b0fe850384d202b354faa5f646cf8e854f31590014cc90f5d7a4ef23a6b52356652d8757e1c3cf76903118c340c899f3543a","ssdeep":"6144:Yb68MnIF2wAeqIb6T4Y8YP/JWRYsjH0ewNxBPTfcXqDeFvu3OvFHWfn8cGFRSte0:tIFGew45YP/8RY7/rMq2Hqn8cGGwrox9","tlshash":"ab743ad476d2f47587b342a2007f150bf23d3a16285d9414f362dcdd78a988aa2bbf36","first_seen":"2026-06-28T11:51:02.406859Z","last_seen":"2026-06-28T12:12:22.138087Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"cryptorescue.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}