{"report_id":"718f38fa-bbfd-4dbd-b465-3609ca2efc28","version":6,"status":"done","tags":[],"date":"2026-02-14T07:21:54Z","url":{"schema":"https","addr":"mgmarket6at-cc.xyz/","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"title":"Один момент...","dom":{"size":23393,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10956)","md5":"b41e6620fc33c273f3f433813bea680e","sha1":"40d62014be9a78c9b17238347791a80d5d97af2e","sha256":"41c255659a593e636f6da15870b52af335f25ee0cff2d0710318464064f7552d","sha512":"1aaae49fe4a2cbfc54760d21f6752fcd2d6fec16a3a47e6db8bb31300ecf6b7b2c3eb8621a49ea413e3df785cb51889861e50101922f03fa8a385823d3a1b63c","ssdeep":"384:D21nb92GgAHLg6Okw+u0eEGvilzSZ2malpaVYcKtyplrBG:WEGE33dvitDmalpj","tlshash":"9db2e72301d405b9b01683e993e6b59ab5324517af92b427f29d0af1cfc94ef1763b8c","dom_hash":"domhash7f0b0d2ffe5ac083c75f674467c4f4c7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T07:21:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mgmarket6at-cc.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mgmarket6at-cc.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"mgmarket6at-cc.xyz","ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-02","domain_rank":0,"first_seen":"2026-02-13T03:06:04.679622Z","last_seen":"2026-02-13T03:06:04.679622Z","alert_count":6,"request_count":3,"received_data":67539,"sent_data":1747,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633b14c2358dffd0980ddfe579266a1a","sha1":"fedd710ea1d6f0e1a5b2ee122af6314a271a4705","sha256":"ab6961b5f17b51d43a9f1b2eb4965ef504e4c8e232f74efef11913bebe8b5b83","sha512":"d0984471be4e2145ac0f13833b3752a42e73236a3a1649da5529e14c4ddb85957c005eaf39ef5e330021417d6f7cd978974e22f10966cfe31a14d6bf56bc44b1","ssdeep":"","tlshash":"30f041eb3c890138d3b302a53b7392483839253f344eac52ba0c18522f94e6518a7a1c","size":621,"data":"","first_seen":"2026-02-13T03:06:08.229932Z","last_seen":"2026-02-14T07:21:55.93808Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c6625be1cdacd65893c81e4dd1dfc50","sha1":"55fe9ce857bc61392608741d8ee514127343939d","sha256":"c68ff5519f3bbc82d69b9c3c3ce8a938d02b60a68552775da0f6580a5f0963da","sha512":"07d8e8731be9bf5466287ebc118f0d8c7cab798081c9e93776fec4d5cfc87cb38f62582522498113bc75359b56f6ff9647119ac67d3cc3f4efab5e84ee2f91c1","ssdeep":"","tlshash":"6561ce292a332034925bf15e2b67f6083e21a11b6802dc197fdcc78c9fa1f50d9678dc","size":3454,"data":"","first_seen":"2026-02-13T03:06:08.261765Z","last_seen":"2026-02-14T07:21:55.939676Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f19086b291cbbaf5e4cde3c486c43174","sha1":"badd416d8017fbc59fe0aed60cde69e30d1c7300","sha256":"d884ee5c938e6c46a37cc9bbf1753fe797831505cd631953b0bf691fa59682a1","sha512":"611b344e1fd55b931915495c7bcf6b735337e83108121784a1aa82af2f0e7e6ac14f47a9b826e2db38830e46f5215c06975beb619a9a631a3d3e3bf8611afd18","ssdeep":"","tlshash":"28117016c2520200a479319ddd9e10049670727721e8e931fc3d66083fe996487fc7f7","size":895,"data":"","first_seen":"2026-02-13T03:06:08.274919Z","last_seen":"2026-02-22T19:56:24.987096Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f019c937e606794804f389d58121f10d","sha1":"21c5bfcf1af706d514d73c64371d368b4060f78d","sha256":"018acdb10f5b7d366347fd23860004aa2d015f3e45f3711a037a07b844cade1c","sha512":"6c6d83ea4e6c175b79c35e1262a24d6c15fa4090be18f7402cbebab835b9da71cce96e92b737f96fa5366640dc837911774067f3128d17bee608361adb4ff95e","ssdeep":"","tlshash":"ec51132a79f341150edbb6a746fb135838309207b845d954792c43e09fb2e85f49bedc","size":2910,"data":"","first_seen":"2025-11-28T22:20:27.049002Z","last_seen":"2026-02-28T08:02:25.010891Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/internalApi/cloudflare_captcha_iframe","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"753e156543ef476ac5a15751a9f5b4c3","sha1":"f8b67867ed300e2263e3515d10fe33bf1d4c78fe","sha256":"c0c6c1d754c5bcd3a4f7b44caba044d62ce09a6eddcc5faa9aab6cfca872e979","sha512":"c00cf3af397e7e103417a450c0a0ad05da8784072046f8f31b03b4c0e2e3f3734e505fa8cbabfaccd3b5a239424f05e7584b2a616de15282c3aea474dfe67860","ssdeep":"","tlshash":"b7118eaf366305740edb25363abb9bc53832943749016a15ba3c46b09f61d93b032bd0","size":912,"data":"","first_seen":"2026-01-14T16:34:10.658916Z","last_seen":"2026-02-28T18:21:06.779628Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/favicon.ico","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmarket6at-cc.xyz/","date":"2026-02-14T07:21:28.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6at-cc.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 18:41:26 GMT","end":"Sun, 03 May 2026 19:40:06 GMT"},"fingerprint":{"sha1":"98:11:AE:49:47:91:A8:BE:18:C1:7B:6C:1C:62:BA:D3:B0:2B:D6:07","sha256":"80:66:C4:D7:AB:0E:1E:1E:60:4B:B2:1E:5D:51:F1:2A:5D:89:A3:23:18:59:77:27:13:9F:4F:C1:8F:27:41:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mgmarket6at-cc.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6at-cc.xyz/\r\nCookie: internal_api_session_id=258947a2-92a6-4c4f-89e8-a28db114673d; internal_api_tor_id=cf0d2620-542c-4f27-96a0-1273f452e546\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:21:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 07:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Rdkyfcv889pnl%2Fvm17H9LfA9JmWDSylMVqrjD0iFjRykuFJIm04mGcLpmdjLlN%2BKnl2qyJENvojmWs0bfbYSLeI9tZqGFEunicmRegol%2F8ERA%3D%3D\"}]}\r\ncf-ray: 9cdacf13a8e43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21061,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6198)","md5":"e2840deed4af1d3de9f31c1bfa6c3a47","sha1":"dae6073b6949921d2c45e0c39e38e9e52796b421","sha256":"0a983f97909ab0c3331315af2b22c7f18495233a68d3838dad03ea75ac1e0f81","sha512":"6833017a27abd6793c7099f86396ab28639d06ed5d563353200dec14d3822f5a7348f1041193fe2133628c9a02a65f2c96a9eca78b02dd6bc1e16f9e8e2b9396","ssdeep":"384:Ez9f61G0lVEJJkmqyK31vDOs6g73nNdND9NAZFq:Ez9S1d8JJk531ycl","tlshash":"71923b3b6ab31018555782a977f3670c3c30a117e902da28feaec7805fd2e519d67b8c","first_seen":"2026-02-14T07:21:55.933825Z","last_seen":"2026-02-14T07:21:55.933825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mgmarket6at-cc.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mgmarket6at-cc.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T07:21:28.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6at-cc.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 18:41:26 GMT","end":"Sun, 03 May 2026 19:40:06 GMT"},"fingerprint":{"sha1":"98:11:AE:49:47:91:A8:BE:18:C1:7B:6C:1C:62:BA:D3:B0:2B:D6:07","sha256":"80:66:C4:D7:AB:0E:1E:1E:60:4B:B2:1E:5D:51:F1:2A:5D:89:A3:23:18:59:77:27:13:9F:4F:C1:8F:27:41:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mgmarket6at-cc.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 07:21:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: internal_api_session_id=258947a2-92a6-4c4f-89e8-a28db114673d; Path=/; Max-Age=1800\ninternal_api_tor_id=cf0d2620-542c-4f27-96a0-1273f452e546; Path=/; Max-Age=1800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c0piPR68KHgd75vaJ%2F5Y3RqINd4mMT2UpdoaUl9R5F4lwiMmQoBlwZcd5I%2B%2Ba3M%2BkffSM%2BOi7z27ytUjm09ToAXUMrZ93Ks5ILLpvfqE7agvjA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdacf116bed783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21061,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6198)","md5":"d2b1179051445233511a306cd66aecb7","sha1":"b1cc3991b5c01233a0c72997e661219b867b91e2","sha256":"94499eeaa929220bf9c9a320dd8c256aa8bd86706f5ae2171fc9e745815e590a","sha512":"d996cffcd03fe29ceda43bd25edd69555a0b63640ebe357b4f0781dec3bdffd9b0f862e4e660ee81c183fb4b218451ae5ce4c115e8c6d10e7daab6ad66619868","ssdeep":"384:Ez9f61G0lVEJJkmqyK31vDOs6g74nNdND9NAZFq:Ez9S1d8JJk531y7l","tlshash":"ea923a3b6ab31018555782a977f7670c3c30a117e902da28feaec7805fd2e519d67b8c","first_seen":"2026-02-14T07:21:55.935407Z","last_seen":"2026-02-14T07:21:55.935407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":109,"dns":85,"connect":3,"send":0,"wait":124,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mgmarket6at-cc.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mgmarket6at-cc.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6at-cc.xyz/internalApi/cloudflare_captcha_iframe","fqdn":"mgmarket6at-cc.xyz","domain":"mgmarket6at-cc.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mgmarket6at-cc.xyz/","date":"2026-02-14T07:21:28.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6at-cc.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 18:41:26 GMT","end":"Sun, 03 May 2026 19:40:06 GMT"},"fingerprint":{"sha1":"98:11:AE:49:47:91:A8:BE:18:C1:7B:6C:1C:62:BA:D3:B0:2B:D6:07","sha256":"80:66:C4:D7:AB:0E:1E:1E:60:4B:B2:1E:5D:51:F1:2A:5D:89:A3:23:18:59:77:27:13:9F:4F:C1:8F:27:41:95"}}},"request":{"raw":"GET /internalApi/cloudflare_captcha_iframe HTTP/1.1\r\nHost: mgmarket6at-cc.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6at-cc.xyz/\r\nCookie: internal_api_session_id=258947a2-92a6-4c4f-89e8-a28db114673d; internal_api_tor_id=cf0d2620-542c-4f27-96a0-1273f452e546\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:21:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bmgU1i9alaUr5%2B4PQ%2BRm29l2bVq4i1GvYpUthypYfCmMcX1xA%2BbyWOQXBcFUq%2BfJG45jWY7pwjFkjnsH5uuf4r62Xz6w4MtexCKTPRy8jo8QKA%3D%3D\"}]}\r\ncf-ray: 9cdacf1368d83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23403,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10956)","md5":"b41e6620fc33c273f3f433813bea680e","sha1":"40d62014be9a78c9b17238347791a80d5d97af2e","sha256":"41c255659a593e636f6da15870b52af335f25ee0cff2d0710318464064f7552d","sha512":"1aaae49fe4a2cbfc54760d21f6752fcd2d6fec16a3a47e6db8bb31300ecf6b7b2c3eb8621a49ea413e3df785cb51889861e50101922f03fa8a385823d3a1b63c","ssdeep":"384:D21nb92GgAHLg6Okw+u0eEGvilzSZ2malpaVYcKtyplrBG:WEGE33dvitDmalpj","tlshash":"9db2e72301d405b9b01683e993e6b59ab5324517af92b427f29d0af1cfc94ef1763b8c","first_seen":"2026-01-14T16:34:10.650209Z","last_seen":"2026-02-28T18:21:06.77054Z","times_seen":18,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mgmarket6at-cc.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mgmarket6at-cc.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}