{"report_id":"71dd0084-7efc-47ab-9f9c-618582ba4a52","version":6,"status":"done","tags":[],"date":"2026-04-16T04:53:51Z","url":{"schema":"http","addr":"monsterwa1.com","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"monsterwa1.com/login","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"title":"MonsterWa","dom":{"size":589377,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39400)","md5":"47a43bf76e036052a66d980648e1696c","sha1":"d525427e6225205e9c56191cb7528e3938600eaf","sha256":"37857becde5d0eece8ecbb06729ceac8a1bc621755a508f93a7d0aa2edbb0baa","sha512":"dd6443e9f6076587b5544c4e9808050846565a81d1ec607b6163a0433f97cc5aa7a40d9c7bc8a2a7865bda4340d28d5467fdbd09ae34762e38703f500137e81c","ssdeep":"6144:LwetxccJaezCp5gQ2HV+X87BmB6iF7aK41X5SmvF5urcasO:/jNaef766ij413PO","tlshash":"eac4086a7314726b56d526d000de210f63f6e028615e005cff77e8deec6d88aa53af39","dom_hash":"domhash8e41a31fd4fd97b9f1db5c3223a14d36","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"monsterwa1.com","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-21T04:53:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/c/d20e92d7370b431dfc001500e0cad77b360e4d09203f2848e3cd8edb4fe5e5df/hsw.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=checkbox\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit\u0026uj=false","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"monsterwa1.com","ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":21,"request_count":7,"received_data":1544532,"sent_data":3197,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eb1ac60eac44.w.hcaptcha.com","ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2049,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-04-15T17:10:56.574071Z","alert_count":0,"request_count":1,"received_data":1700,"sent_data":647,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-04-15T15:17:01.26259Z","alert_count":3,"request_count":3,"received_data":2062095,"sent_data":1754,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}]},{"fqdn":"a679dfdbba17.w.hcaptcha.com","ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2049,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"js.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":44433,"first_seen":"2021-07-30T11:51:37Z","last_seen":"2026-04-09T05:07:32.584744Z","alert_count":1,"request_count":1,"received_data":306346,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/d20e92d7370b431dfc001500e0cad77b360e4d09203f2848e3cd8edb4fe5e5df/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0b0db1a9240400e12cb21fff352aac0","sha1":"0bd3a443eb7840f127c72af7fa27bbab24a179eb","sha256":"e3488f55f13af02ed337dca7d5726fe339673fb906b71ab246bb18ad05b2f272","sha512":"aac3f0f5d1ed567249add1fb32a553fee115f7e2d5916a77b21f8972562f2c54bf27fbe44986a6eb5711b3c189704d58bf09c9a7fe6cdcb1d983a616326c65f6","ssdeep":"24576:YAyG52BD2+XBENbcnxLfUW4JHgNzWgLpXPiyGH3Ht5ICpQaJ0wZ/FkB017R+WaiB:+3KqK","tlshash":"e31529bf4351992aefb305bc551f22132948c9db9a46ddd0af4ec4b3e4900af585e8ec","size":911595,"data":"","first_seen":"2026-04-14T18:39:48.77266Z","last_seen":"2026-04-16T09:59:36.693492Z","times_seen":307,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/c/d20e92d7370b431dfc001500e0cad77b360e4d09203f2848e3cd8edb4fe5e5df/hsw.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-04-16T10:09:22.468303Z","times_seen":48312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-04-16T10:09:22.468303Z","times_seen":48312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=checkbox\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cff07dde99001bba6e33f684820c5f8","sha1":"562c1ab05af527a542d7481045cba7016f91b5e1","sha256":"427c809f2d2a4d2c7bc2ad06fad9f53559db69b572124321049218980531c3c8","sha512":"4415c1504ce96db5a9684c3a2b4b152e9dfa1957d82b8a05726c262bb69aa439a1add9a2ae6a1a6d9aa2ed8d03391cca3c86e9bdcf73fb175e2c6b978c5f127a","ssdeep":"6144:2wetxccJaezCp5gQ2HV+X87BmB6iF7aK41X5SmvF5urca3:kjNaef766ij413G","tlshash":"2ec4096a7314726b56d526d000df210f63f6e028615e005cff77e8deac6d88aa53eb39","size":572173,"data":"","first_seen":"2026-04-15T15:12:16.162122Z","last_seen":"2026-04-16T09:59:36.751608Z","times_seen":183,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=checkbox\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-04-16T10:09:22.476496Z","times_seen":43992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monsterwa1.com/static/js/main.c05018bf.js","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c0a05496fc5c8b1c1716a2a3a07a271","sha1":"dfbf75eff2dbce2082fde70970fe8f1d5caf66b3","sha256":"090f325ca210d3e9dc37ad1ccd5372053a5ea3f3cc853b40c7defa93d2076fba","sha512":"8ad4ece671f68c58fe42c8f8fc26fc90cd33bd623153fbbf021f9b0bd2558b6b7ff748cf865dd0a8b1be8fb1165b1a833c91c45ba69833f37138c710c31255cf","ssdeep":"6144:yyCAtOVjjytuly523NqB4FaoSxIh28mkQ/RD5SDtR6lCeOP7RxHmcfdTi/gHUdpu:yyCFP5x3NskafuNmoeOP7RHfddHEsJG4","tlshash":"39152b84b151f579ba7714d140bf400bb33a3b4aa40d8860b1adfcd93b6ca897267f6d","size":950848,"data":"","first_seen":"2026-04-16T04:54:00.322827Z","last_seen":"2026-04-16T04:55:37.222138Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit\u0026uj=false","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f44b840bfd6b5dff16b23b1b8d9a9556","sha1":"0d7757760840798c2cb00171f043481a87f6be77","sha256":"ca53fd1d5521d262bc51c8a537d3cb916e68b911bb302a5e0b0a3ca79bb22f6c","sha512":"c79bb8ead386a6d527b2e631d006a8bbb11d92446cddcf89fcc6ed6fde9b7778eeba204972689a5f65eb9dd8aa862414dd39870e188f054384598e130536361b","ssdeep":"6144:AwxT8YvsiA2XuRqpM07Un7ZWW9CXCMbiAfv:9LuU7","tlshash":"a854a77b2354a35b6ba02ad040de310f63f6e419649d1428ff73e8deec5d882e479b25","size":305518,"data":"","first_seen":"2026-04-15T15:12:15.953948Z","last_seen":"2026-04-16T09:59:36.706386Z","times_seen":196,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit\u0026uj=false","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cff07dde99001bba6e33f684820c5f8","sha1":"562c1ab05af527a542d7481045cba7016f91b5e1","sha256":"427c809f2d2a4d2c7bc2ad06fad9f53559db69b572124321049218980531c3c8","sha512":"4415c1504ce96db5a9684c3a2b4b152e9dfa1957d82b8a05726c262bb69aa439a1add9a2ae6a1a6d9aa2ed8d03391cca3c86e9bdcf73fb175e2c6b978c5f127a","ssdeep":"6144:2wetxccJaezCp5gQ2HV+X87BmB6iF7aK41X5SmvF5urca3:kjNaef766ij413G","tlshash":"2ec4096a7314726b56d526d000df210f63f6e028615e005cff77e8deac6d88aa53eb39","size":572173,"data":"","first_seen":"2026-04-15T15:12:16.162122Z","last_seen":"2026-04-16T09:59:36.751608Z","times_seen":183,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit\u0026uj=false","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 22:25:53 GMT","end":"Thu, 21 May 2026 23:25:49 GMT"},"fingerprint":{"sha1":"62:E5:D1:6A:06:37:21:6C:90:4B:F9:1B:D1:1E:5B:A1:DD:87:2E:4E","sha256":"F0:AE:FE:7D:9A:31:CB:DF:08:44:61:50:2A:35:DC:2C:A0:D5:BC:E3:B7:BC:ED:9A:E8:05:DB:94:07:A7:D8:33"}}},"request":{"raw":"GET /1/api.js?onload=hCaptchaOnLoad\u0026render=explicit\u0026uj=false HTTP/1.1\r\nHost: js.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monsterwa1.com/\r\nOrigin: https://monsterwa1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Apr 2026 04:53:26 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9ed09619192d0daa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Q6lsqjCAZzJ.snK5bIWIzj93nhrBj1N8lRWSZHV3rPM-1776315206.5707333-1.0.1.1-4j0XYWoEGZoBXCn_vd8WC3Q017A7dQobrbt8ec5gomYtsiGc5xHFZDLzIubpIvyGB8qULM1bmR4.pTU.YPjGMix5_3OZ2mcCuQ88tRn_19KBdi3t.vUJx2rQpzGSKjCj; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Thu, 16 Apr 2026 05:23:26 GMT\r\ncache-control: max-age=300\r\netag: W/\"606c900948fb24401024d68ef5cc4d00\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305518,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"f44b840bfd6b5dff16b23b1b8d9a9556","sha1":"0d7757760840798c2cb00171f043481a87f6be77","sha256":"ca53fd1d5521d262bc51c8a537d3cb916e68b911bb302a5e0b0a3ca79bb22f6c","sha512":"c79bb8ead386a6d527b2e631d006a8bbb11d92446cddcf89fcc6ed6fde9b7778eeba204972689a5f65eb9dd8aa862414dd39870e188f054384598e130536361b","ssdeep":"6144:AwxT8YvsiA2XuRqpM07Un7ZWW9CXCMbiAfv:9LuU7","tlshash":"a854a77b2354a35b6ba02ad040de310f63f6e419649d1428ff73e8deec5d882e479b25","first_seen":"2026-04-15T15:12:15.953948Z","last_seen":"2026-04-16T09:59:36.706386Z","times_seen":196,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":50,"dns":33,"connect":1,"send":0,"wait":12,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit\u0026uj=false","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"monsterwa1.com/public/wa.webp","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monsterwa1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 07:13:44 GMT","end":"Mon, 06 Jul 2026 07:13:43 GMT"},"fingerprint":{"sha1":"35:B9:79:B3:8B:01:FD:FA:CC:E1:CD:CD:BD:0F:6C:70:7E:7E:FB:A4","sha256":"DF:9E:70:F3:5E:C7:15:3B:79:B8:37:63:37:28:61:DE:68:73:74:5F:8E:96:13:DD:FF:D7:AC:B0:D4:F7:82:69"}}},"request":{"raw":"GET /public/wa.webp HTTP/1.1\r\nHost: monsterwa1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monsterwa1.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 16 Apr 2026 04:53:27 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeCbT8J2WLNM9EkGSThAmSS62rkXat1YBibJWuVhlp5XDjB2Ae%2F6qOQuDUVdAKeucHvoaTF4xb%2BY4xsEsW3IZKyb85h90ovZZeF4V5oLIUZKFiBFONbMfxaXY2NxLrvqyQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9ed0961a6d104e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-16T10:00:02.384972Z","times_seen":489028,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eb1ac60eac44.w.hcaptcha.com/logo.png","fqdn":"eb1ac60eac44.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=checkbox\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","date":"2026-04-16T04:53:27.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:48:26 GMT","end":"Sat, 23 May 2026 19:48:25 GMT"},"fingerprint":{"sha1":"15:F6:82:38:1E:2E:55:EB:42:6E:2E:B7:7A:83:FA:AA:61:52:D4:49","sha256":"82:D8:17:7B:A9:65:8E:70:DC:B5:9C:2F:8C:DA:9E:05:05:BD:63:3C:08:55:A7:17:CA:D9:15:46:16:6B:0A:D6"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: eb1ac60eac44.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 16 Apr 2026 04:53:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 1412\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=86400\r\nLast-Modified: Tue, 22 Oct 2020 18:30:00 GMT\r\nVary: Host\r\nTiming-Allow-Origin: *\r\nset-cookie: __cf_bm=ODbQqSTWhM2Ljf659V986jaPDrBgPCJ1L6DKu0TDW5U-1776315207.328178-1.0.1.1-Pl9897Wio8fjU3AMZIloXURbQi.6p4CI0yTxw2VvwZgAhPTbMR9KLKDYhw273Y7TETG.gHcfygloiimgQdHDeoplGxYCUn0etrXTSn5MWt1f7QShzzWc7oZ4J6_6tqa7; HttpOnly; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Thu, 16 Apr 2026 05:23:27 GMT\r\nServer: cloudflare\r\nCF-RAY: 9ed0961dcbd5c272-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced","md5":"78b41beeebd802a10a4a553434790756","sha1":"32492e1a00791f27c85e19aef7ba06f942ab514e","sha256":"5304f6304b810992dc8f906fe7e9f98feeb36b8356efd27ea2e871223c5f15e5","sha512":"ea67e115882c218389102ade46d0abf950e12b0061eb230cb6268d9158e0b461a3f773283a18baac32ae142b8c0e86eeb22b35d8457afa4045260f3c16ffa4fd","ssdeep":"","tlshash":"002101501b702161c1cb47329dd21e06f9b68843add9de0bf78c9c761f44ac5749f389","first_seen":"2025-11-14T20:20:17.054105Z","last_seen":"2026-04-16T10:09:22.396622Z","times_seen":36500,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":36,"dns":23,"connect":1,"send":0,"wait":6,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa\u0026host=monsterwa1.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","date":"2026-04-16T04:53:27.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 22:25:53 GMT","end":"Thu, 21 May 2026 23:25:49 GMT"},"fingerprint":{"sha1":"62:E5:D1:6A:06:37:21:6C:90:4B:F9:1B:D1:1E:5B:A1:DD:87:2E:4E","sha256":"F0:AE:FE:7D:9A:31:CB:DF:08:44:61:50:2A:35:DC:2C:A0:D5:BC:E3:B7:BC:ED:9A:E8:05:DB:94:07:A7:D8:33"}}},"request":{"raw":"POST /checksiteconfig?v=3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa\u0026host=monsterwa1.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 04:53:27 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=7NfQlWL1PwH.opFBjpobqVFm2CJ_nM6kEubS7bgAYwg-1776315207.3803396-1.0.1.1-1GiHMiG8PIkQ_.DFi5lNHthPR5RM0TcVrQcyqiI73opZkYIcGp2z8rweDgD6jMQSKBBy0_rOEdJyFNJefNEsY4m7a.coE47ZBLp10lmlKzIF.2lPf8AHCzLlkekNZ64U; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Thu, 16 Apr 2026 05:23:27 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ed0961e180856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"df844d50a30d3722d3f1e467db8dbd06","sha1":"e78ca5316c889feb94e26e30db96f22f18005375","sha256":"2f6d535daefce055e8c1447ffe059c022ee3fd235a48dd90098e5b0fc28d0664","sha512":"e7468a8a19d50f70880d38be9c86e54cc79a0d2a81a6599402655a57b7782f172de3aa5f35bc21b5002e6cddadf01e8317b9d4b96c6eebd2c629541988722d96","ssdeep":"","tlshash":"ba0175f17d8c12efe7026e0d384a3b36121e619158513db5c4be5e4dc4f6009c48395b","first_seen":"2026-04-16T04:54:00.31785Z","last_seen":"2026-04-16T04:54:00.31785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/d20e92d7370b431dfc001500e0cad77b360e4d09203f2848e3cd8edb4fe5e5df/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","date":"2026-04-16T04:53:27.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 22:25:53 GMT","end":"Thu, 21 May 2026 23:25:49 GMT"},"fingerprint":{"sha1":"62:E5:D1:6A:06:37:21:6C:90:4B:F9:1B:D1:1E:5B:A1:DD:87:2E:4E","sha256":"F0:AE:FE:7D:9A:31:CB:DF:08:44:61:50:2A:35:DC:2C:A0:D5:BC:E3:B7:BC:ED:9A:E8:05:DB:94:07:A7:D8:33"}}},"request":{"raw":"GET /c/d20e92d7370b431dfc001500e0cad77b360e4d09203f2848e3cd8edb4fe5e5df/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 04:53:27 GMT\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=3024000\r\nset-cookie: __cf_bm=4CkaIxGC1BkPjfRCX67r9wc6u9K7peKkvwZKeA6XkKc-1776315207.425109-1.0.1.1-ddVDbhcsKD2wq65l0DdxwZiZXjrGW47ayv7s4_9X4XgtzJqKzJf7DK0AAqryUTV36dZQgNG99XuipivDjAKWLGQCap.5bqMBv70IDFBmZrIyLxe9tZfyS88QdBPU3SBC; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Thu, 16 Apr 2026 05:23:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"c0b0db1a9240400e12cb21fff352aac0\"\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-ray: 9ed0961e684156ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":911595,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"c0b0db1a9240400e12cb21fff352aac0","sha1":"0bd3a443eb7840f127c72af7fa27bbab24a179eb","sha256":"e3488f55f13af02ed337dca7d5726fe339673fb906b71ab246bb18ad05b2f272","sha512":"aac3f0f5d1ed567249add1fb32a553fee115f7e2d5916a77b21f8972562f2c54bf27fbe44986a6eb5711b3c189704d58bf09c9a7fe6cdcb1d983a616326c65f6","ssdeep":"24576:YAyG52BD2+XBENbcnxLfUW4JHgNzWgLpXPiyGH3Ht5ICpQaJ0wZ/FkB017R+WaiB:+3KqK","tlshash":"e31529bf4351992aefb305bc551f22132948c9db9a46ddd0af4ec4b3e4900af585e8ec","first_seen":"2026-04-14T18:39:48.77266Z","last_seen":"2026-04-16T09:59:36.693492Z","times_seen":307,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":7,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/c/d20e92d7370b431dfc001500e0cad77b360e4d09203f2848e3cd8edb4fe5e5df/hsw.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"monsterwa1.com/static/js/main.c05018bf.js","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monsterwa1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 07:13:44 GMT","end":"Mon, 06 Jul 2026 07:13:43 GMT"},"fingerprint":{"sha1":"35:B9:79:B3:8B:01:FD:FA:CC:E1:CD:CD:BD:0F:6C:70:7E:7E:FB:A4","sha256":"DF:9E:70:F3:5E:C7:15:3B:79:B8:37:63:37:28:61:DE:68:73:74:5F:8E:96:13:DD:FF:D7:AC:B0:D4:F7:82:69"}}},"request":{"raw":"GET /static/js/main.c05018bf.js HTTP/1.1\r\nHost: monsterwa1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monsterwa1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Apr 2026 04:53:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 15 Apr 2026 08:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Oct 2026 08:49:47 GMT\r\ncache-control: public, max-age=15552000, immutable\r\ncontent-encoding: br\r\nage: 72218\r\ncf-cache-status: HIT\r\netag: W/\"69df484a-e8240\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFNZZh%2BO%2BgtL%2FEgZ93NHMBBiN95AjXdhoHfGLH4HdkkBP5M%2BEwwBE8i6F7AHBNrHTMDm7va8bjLpsGPv8RI8D2OnA5STZ1XEQa5mLfUDOD57QrMk%2FhZU3IMyC6Aa3VjuIg%3D%3D\"}]}\r\ncf-ray: 9ed09616fce94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":950848,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"2c0a05496fc5c8b1c1716a2a3a07a271","sha1":"dfbf75eff2dbce2082fde70970fe8f1d5caf66b3","sha256":"090f325ca210d3e9dc37ad1ccd5372053a5ea3f3cc853b40c7defa93d2076fba","sha512":"8ad4ece671f68c58fe42c8f8fc26fc90cd33bd623153fbbf021f9b0bd2558b6b7ff748cf865dd0a8b1be8fb1165b1a833c91c45ba69833f37138c710c31255cf","ssdeep":"6144:yyCAtOVjjytuly523NqB4FaoSxIh28mkQ/RD5SDtR6lCeOP7RxHmcfdTi/gHUdpu:yyCFP5x3NskafuNmoeOP7RHfddHEsJG4","tlshash":"39152b84b151f579ba7714d140bf400bb33a3b4aa40d8860b1adfcd93b6ca897267f6d","first_seen":"2026-04-16T04:54:00.322827Z","last_seen":"2026-04-16T04:55:37.222138Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"monsterwa1.com/static/css/main.236cae83.css","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monsterwa1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 07:13:44 GMT","end":"Mon, 06 Jul 2026 07:13:43 GMT"},"fingerprint":{"sha1":"35:B9:79:B3:8B:01:FD:FA:CC:E1:CD:CD:BD:0F:6C:70:7E:7E:FB:A4","sha256":"DF:9E:70:F3:5E:C7:15:3B:79:B8:37:63:37:28:61:DE:68:73:74:5F:8E:96:13:DD:FF:D7:AC:B0:D4:F7:82:69"}}},"request":{"raw":"GET /static/css/main.236cae83.css HTTP/1.1\r\nHost: monsterwa1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monsterwa1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Apr 2026 04:53:26 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 15 Apr 2026 08:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Oct 2026 08:49:47 GMT\r\ncache-control: public, max-age=15552000, immutable\r\ncontent-encoding: br\r\nage: 72218\r\ncf-cache-status: HIT\r\netag: W/\"69df484a-5c2f7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QTSy%2FX5ADFnr%2BW1ubKIGnfnkQlBqOeiLudY8RGaCU95SGdRMV%2BY3Ifk5D%2Fy5q5CTDy7ypeqRJcQg142sNOUEl5wNdWRuI4meiRll9OCc47ZUHPe%2FM%2FXknde0soPKundLyA%3D%3D\"}]}\r\ncf-ray: 9ed09616fcea4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377591,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (42082)","md5":"7de1a5d828a5b57d250f18938ac62bb2","sha1":"0edd9d90860efb677cc14a7a0d754b14295dc5dc","sha256":"15dc14897380d2879b4657881b317e0d6bfe124d9642472009ea90b218850f46","sha512":"36a40829a3565f6016782cd654664617973e5ab6fa3bff6f9b41da494844837660ef012fd21dcaa2144b5568548d2637cb4c74a9912bafae303367612a8af958","ssdeep":"3072:R/2jkla9VMBnoA9Qf98Pz9eXlKpje60I45b:R/O9VMBnB9Qf96zVpje60I45b","tlshash":"c88433e9f18430f96b73c046ab81bfad656af558da510d69f00b632c0bc57d20693eec","first_seen":"2026-04-14T22:29:52.073531Z","last_seen":"2026-04-16T04:55:37.224723Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"monsterwa1.com/wa.webp","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monsterwa1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 07:13:44 GMT","end":"Mon, 06 Jul 2026 07:13:43 GMT"},"fingerprint":{"sha1":"35:B9:79:B3:8B:01:FD:FA:CC:E1:CD:CD:BD:0F:6C:70:7E:7E:FB:A4","sha256":"DF:9E:70:F3:5E:C7:15:3B:79:B8:37:63:37:28:61:DE:68:73:74:5F:8E:96:13:DD:FF:D7:AC:B0:D4:F7:82:69"}}},"request":{"raw":"GET /wa.webp HTTP/1.1\r\nHost: monsterwa1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monsterwa1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Apr 2026 04:53:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37764\r\nlast-modified: Wed, 15 Apr 2026 08:11:34 GMT\r\netag: \"69df4836-9384\"\r\nexpires: Mon, 12 Oct 2026 08:49:50 GMT\r\ncache-control: public, max-age=15552000, immutable\r\naccept-ranges: bytes\r\nage: 72216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRcT9mQOU7Xs%2F%2FL5aaDZ%2BJOD8uG41TCbID1YkbmfcHTg5YR1B2Os8XsZy2UOrZMPGtzKcBInPALnAF61lWSfnwmqiyP52EloSx2pcyNEvpBDkLenJnG8E0xACwURGKeZhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9ed096186cf94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24faf133de2f1a1de7390f6f9cc976b3","sha1":"9242bec59b710df6008eb0cf5ce14e5de11fef34","sha256":"2c3d53f4110491d65e6dcfc3126e53dcd58ae9f3dadebd238f3bcbdbf9364447","sha512":"1941f960cababaff5bd72b2afb7b7d2292b6e867f103373ae608698451371c896101a2df5d89a7391bb047e2665f2d8272746a4f625e2d2ede6056c573f9280a","ssdeep":"768:c9Q9I51lni3Z3y/uSmT+srUOQQL7AnsC0hcnNPXK:cAI5TBuSxsr7LAy6NS","tlshash":"8303f16f131b8fc22c95d34e885dbd0aacf8f4fed34ed90b064ba57a65286b844159c8","first_seen":"2025-05-10T17:54:24.069668Z","last_seen":"2026-04-16T04:55:37.225813Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"monsterwa1.com/wa.webp","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monsterwa1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 07:13:44 GMT","end":"Mon, 06 Jul 2026 07:13:43 GMT"},"fingerprint":{"sha1":"35:B9:79:B3:8B:01:FD:FA:CC:E1:CD:CD:BD:0F:6C:70:7E:7E:FB:A4","sha256":"DF:9E:70:F3:5E:C7:15:3B:79:B8:37:63:37:28:61:DE:68:73:74:5F:8E:96:13:DD:FF:D7:AC:B0:D4:F7:82:69"}}},"request":{"raw":"GET /wa.webp HTTP/1.1\r\nHost: monsterwa1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monsterwa1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Apr 2026 04:53:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37764\r\nlast-modified: Wed, 15 Apr 2026 08:11:34 GMT\r\netag: \"69df4836-9384\"\r\nexpires: Mon, 12 Oct 2026 08:49:50 GMT\r\ncache-control: public, max-age=15552000, immutable\r\naccept-ranges: bytes\r\nage: 72216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wynyh%2F80SaR59eIzdl86GBKcvwu%2FJI%2Fg2r7%2BbCw4MFFt7ky4iUzV7BYs8oveVUP0hX1u5wRX8uIvWifd9Cqb6hNq7akirFUUqUC5xWNHx6AthUCsSwFcf47V8I89hdDoeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9ed096186cfa4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24faf133de2f1a1de7390f6f9cc976b3","sha1":"9242bec59b710df6008eb0cf5ce14e5de11fef34","sha256":"2c3d53f4110491d65e6dcfc3126e53dcd58ae9f3dadebd238f3bcbdbf9364447","sha512":"1941f960cababaff5bd72b2afb7b7d2292b6e867f103373ae608698451371c896101a2df5d89a7391bb047e2665f2d8272746a4f625e2d2ede6056c573f9280a","ssdeep":"768:c9Q9I51lni3Z3y/uSmT+srUOQQL7AnsC0hcnNPXK:cAI5TBuSxsr7LAy6NS","tlshash":"8303f16f131b8fc22c95d34e885dbd0aacf8f4fed34ed90b064ba57a65286b844159c8","first_seen":"2025-05-10T17:54:24.069668Z","last_seen":"2026-04-16T04:55:37.225813Z","times_seen":62,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"monsterwa1.com/static/media/bootstrap-icons.92ea18a81d737146ff04.woff2","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monsterwa1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 07:13:44 GMT","end":"Mon, 06 Jul 2026 07:13:43 GMT"},"fingerprint":{"sha1":"35:B9:79:B3:8B:01:FD:FA:CC:E1:CD:CD:BD:0F:6C:70:7E:7E:FB:A4","sha256":"DF:9E:70:F3:5E:C7:15:3B:79:B8:37:63:37:28:61:DE:68:73:74:5F:8E:96:13:DD:FF:D7:AC:B0:D4:F7:82:69"}}},"request":{"raw":"GET /static/media/bootstrap-icons.92ea18a81d737146ff04.woff2 HTTP/1.1\r\nHost: monsterwa1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://monsterwa1.com/static/css/main.236cae83.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Apr 2026 04:53:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 134044\r\nlast-modified: Wed, 15 Apr 2026 08:11:54 GMT\r\netag: \"69df484a-20b9c\"\r\nexpires: Tue, 13 Oct 2026 04:53:27 GMT\r\ncache-control: public, max-age=15552000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJ72Saitu2tphX7PsFcoqEuaNCk8LCKzTcXmL64P%2F8PblLK2t%2FCJacUEA5rhucvw30K1mbrDtG4RoiDydD7SEy9LKKpRSs2UQ3iTPYZsPBN9fSKqjKrtrzjAMQnPwQ1pcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ed096196d054e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 134044, version 1.0","md5":"84a4d15b9e4459b6229a7f1dccc6609c","sha1":"b441fcff939e24fa0906a37b7788788b9fddbb68","sha256":"6c75710364a1ca5604267716f6d28997b26319fdb078cf11e0b42ab66ff2ea61","sha512":"d767814d144b311254de5d248d4a1cd2777209016687c11b3a7791642d90ff267c11d0001fb30435e3767959a2a00d4076e1bc6fad3c7a58cfdb00e5c77c44ce","ssdeep":"3072:tDHos22Zs2P3qithtQxgI+oZzvHB2haro8yYMBX:FHo8s2P3qi1Q+K1hLrxmX","tlshash":"19d3127e338ead54c8b4d32963588c7522ef82c2962bb2235f71523386f94fce485517","first_seen":"2025-05-15T10:27:38.85456Z","last_seen":"2026-04-16T09:21:13.478936Z","times_seen":3473,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":596,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 22:25:53 GMT","end":"Thu, 21 May 2026 23:25:49 GMT"},"fingerprint":{"sha1":"62:E5:D1:6A:06:37:21:6C:90:4B:F9:1B:D1:1E:5B:A1:DD:87:2E:4E","sha256":"F0:AE:FE:7D:9A:31:CB:DF:08:44:61:50:2A:35:DC:2C:A0:D5:BC:E3:B7:BC:ED:9A:E8:05:DB:94:07:A7:D8:33"}}},"request":{"raw":"GET /captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monsterwa1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 04:53:26 GMT\r\ncontent-type: text/html\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nset-cookie: __cf_bm=bVVvu5YAgAXxDQ6_zMrOMPBskiVogXWaErEmXfyB9k8-1776315206.7546937-1.0.1.1-fV4jBIYY2BYnQO6HzJ8MjlyvILdyvjqhTXKQ75KTBkTLx09IP1K8irSObdnK9LRtQlzxLUSx59ovOL9Lnnp6xGzx6bB.RiFmc.lxYNcn.aXKfz0XI2jGAYFPd4CKQEQT; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Thu, 16 Apr 2026 05:23:26 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding, Origin\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncontent-encoding: br\r\ncf-ray: 9ed0961a3dd456ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":573924,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"c00326cdfc8e637197c9db3faea922d1","sha1":"04ece774eb545b60454bdff53417c5de21199d38","sha256":"13da688439a600fc6533d8c51d162e92c5139ea31912ff1b7a24cf8741b0c059","sha512":"04dbbd66c7d6c656298df8c194f975a57b5d1dfd1b00e9cda99812493a478d0e50174fc19ca5064dd9d20b83a580c7e70795739664b3fc2090b6f05ee676989c","ssdeep":"6144:BwetxccJaezCp5gQ2HV+X87BmB6iF7aK41X5SmvF5urcau:xjNaef766ij413X","tlshash":"bdc4086a7314726b56d526d000df210f63f6e028615e005cff77e8deac6d88aa53eb39","first_seen":"2026-04-15T15:12:15.900103Z","last_seen":"2026-04-16T09:59:36.705406Z","times_seen":183,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=checkbox\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://monsterwa1.com/","date":"2026-04-16T04:53:26.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 22:25:53 GMT","end":"Thu, 21 May 2026 23:25:49 GMT"},"fingerprint":{"sha1":"62:E5:D1:6A:06:37:21:6C:90:4B:F9:1B:D1:1E:5B:A1:DD:87:2E:4E","sha256":"F0:AE:FE:7D:9A:31:CB:DF:08:44:61:50:2A:35:DC:2C:A0:D5:BC:E3:B7:BC:ED:9A:E8:05:DB:94:07:A7:D8:33"}}},"request":{"raw":"GET /captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://monsterwa1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Apr 2026 04:53:26 GMT\r\ncontent-type: text/html\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nset-cookie: __cf_bm=VuUpyYo.HDgfs28v6XeBFygLp_StHDntuoWMotMMoCY-1776315206.7551284-1.0.1.1-xeUJ5zttG68qAW.Aj9PAg9Pj4VJ69RPG5q_MRZCdJyQ8XOTQMMWKZ4Zs3a98Yoa262mBV3JqzEzjj9gjuEYQAdqRLCIKo_fB121lVFG3IEE9lCfJJJ00z35oiGMuindw; HttpOnly; Secure; Path=/; Domain=hcaptcha.com; Expires=Thu, 16 Apr 2026 05:23:26 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding, Origin\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncontent-encoding: br\r\ncf-ray: 9ed0961a3dd556ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":573924,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"c00326cdfc8e637197c9db3faea922d1","sha1":"04ece774eb545b60454bdff53417c5de21199d38","sha256":"13da688439a600fc6533d8c51d162e92c5139ea31912ff1b7a24cf8741b0c059","sha512":"04dbbd66c7d6c656298df8c194f975a57b5d1dfd1b00e9cda99812493a478d0e50174fc19ca5064dd9d20b83a580c7e70795739664b3fc2090b6f05ee676989c","ssdeep":"6144:BwetxccJaezCp5gQ2HV+X87BmB6iF7aK41X5SmvF5urcau:xjNaef766ij413X","tlshash":"bdc4086a7314726b56d526d000df210f63f6e028615e005cff77e8deac6d88aa53eb39","first_seen":"2026-04-15T15:12:15.900103Z","last_seen":"2026-04-16T09:59:36.705406Z","times_seen":183,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-16","alert":"Hunting_JS_WebAssembly","trigger":"newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=checkbox\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"a679dfdbba17.w.hcaptcha.com/logo.png","fqdn":"a679dfdbba17.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/3b51cea83ce6dead3aa67ad1ba6db0cc5379ddfa/static/hcaptcha.html#frame=challenge\u0026id=059hp681wn2g\u0026host=monsterwa1.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=75c8b3b0-a30e-4ce8-99ca-22c66f302904\u0026theme=light\u0026origin=https%3A%2F%2Fmonsterwa1.com","date":"2026-04-16T04:53:27.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:48:26 GMT","end":"Sat, 23 May 2026 19:48:25 GMT"},"fingerprint":{"sha1":"15:F6:82:38:1E:2E:55:EB:42:6E:2E:B7:7A:83:FA:AA:61:52:D4:49","sha256":"82:D8:17:7B:A9:65:8E:70:DC:B5:9C:2F:8C:DA:9E:05:05:BD:63:3C:08:55:A7:17:CA:D9:15:46:16:6B:0A:D6"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: a679dfdbba17.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 16 Apr 2026 04:53:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 1412\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=86400\r\nLast-Modified: Tue, 22 Oct 2020 18:30:00 GMT\r\nVary: Host\r\nTiming-Allow-Origin: *\r\nset-cookie: __cf_bm=6J.c2NNrTgfdoa0f5Nuvb6Fd_0xEoZnoNm8ClXCaGc4-1776315207.141419-1.0.1.1-33dpzZO_KIAytluHF6uZs4zs4gVWM5BeqXzjnquVOPsQ2Okl8Hq3t77t5mMgdikkBG9hUw.sDET_sHTZIDgNdvOC7pyO1gp9Tv_wrliz_dkqBpG97jtQWC3ln23yD6JK; HttpOnly; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Thu, 16 Apr 2026 05:23:27 GMT\r\nServer: cloudflare\r\nCF-RAY: 9ed0961ca99cc272-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced","md5":"78b41beeebd802a10a4a553434790756","sha1":"32492e1a00791f27c85e19aef7ba06f942ab514e","sha256":"5304f6304b810992dc8f906fe7e9f98feeb36b8356efd27ea2e871223c5f15e5","sha512":"ea67e115882c218389102ade46d0abf950e12b0061eb230cb6268d9158e0b461a3f773283a18baac32ae142b8c0e86eeb22b35d8457afa4045260f3c16ffa4fd","ssdeep":"","tlshash":"002101501b702161c1cb47329dd21e06f9b68843add9de0bf78c9c761f44ac5749f389","first_seen":"2025-11-14T20:20:17.054105Z","last_seen":"2026-04-16T10:09:22.396622Z","times_seen":36500,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":47,"dns":23,"connect":1,"send":0,"wait":11,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"monsterwa1.com/","fqdn":"monsterwa1.com","domain":"monsterwa1.com","tld":"com"},"ip":{"addr":"104.21.91.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-16T04:53:25.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"monsterwa1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 07:13:44 GMT","end":"Mon, 06 Jul 2026 07:13:43 GMT"},"fingerprint":{"sha1":"35:B9:79:B3:8B:01:FD:FA:CC:E1:CD:CD:BD:0F:6C:70:7E:7E:FB:A4","sha256":"DF:9E:70:F3:5E:C7:15:3B:79:B8:37:63:37:28:61:DE:68:73:74:5F:8E:96:13:DD:FF:D7:AC:B0:D4:F7:82:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: monsterwa1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Apr 2026 04:53:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 08:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://monsterwa1.com wss://monsterwa1.com; frame-src https://hcaptcha.com https://*.hcaptcha.com; base-uri 'self'; form-action 'self'; upgrade-insecure-requests\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUusavcpDXJn6iImM9S7L2Pswi56P3Ggg7uSXoNS0gRNX84M463cZElcqVJh8LAnkPWbVe9%2FU9yKf5g4EDusKhbPNEhonYoKLgNCRF3gUXl1%2FyyIjCp3I5AMjkNSi0dXLw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ed096128d45b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (560), with no line terminators","md5":"5352df6984baeea408b589ec495f7f68","sha1":"9da972633a51e8d0ff743e677ada1c084ef1cfcd","sha256":"c9f84e962d9a5fa88e338104d3b4b6c54e1578aee4a7338d0a68622c285300a7","sha512":"f55297c7dde20825c0aa7ad88148147faf384c48909a3f42788e55ef859d0a8feb75a3a8a495d457b56e3085a74fb22175b7099fcc2df51b8429fd58e4326a2d","ssdeep":"","tlshash":"3ef08b43cc10c48d9730577bfd62b1acc84bb80c6ae2fc24b89524b658d0b729c65956","first_seen":"2026-04-16T04:54:00.331973Z","last_seen":"2026-04-16T04:55:37.228424Z","times_seen":2,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":31,"dns":16,"connect":1,"send":0,"wait":595,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"monsterwa1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}