{"report_id":"73b9f92c-433a-412b-9131-50afc65a3bbd","version":0,"status":"done","tags":[],"date":"2026-09-04T16:37:04Z","url":{"schema":"http","addr":"mygirlfriendjingtian.lol/","fqdn":"mygirlfriendjingtian.lol","domain":"mygirlfriendjingtian.lol","tld":"lol"},"ip":{"addr":"104.21.45.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"basednewsarticle.com/","fqdn":"basednewsarticle.com","domain":"basednewsarticle.com","tld":"com"},"title":"Just a moment...","dom":{"size":7536,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7521)","md5":"5d06f0709d80bd06b6529d7b435a646f","sha1":"3f9d63da0917bd3c5f73819c779c4c313a03d75b","sha256":"21f72915aa8983bd059e6f83e009839531d6dcb0eb5e56abcff18737573c6308","sha512":"631833a5b4360432609a3dcca7966c1ca4e0071e449bb55306bdf0d9d4454e8c6e1b27af850186b195ea4cb4ebe54d60ff7de4fb29ee3eb8a25bb1f0f3ff009b","ssdeep":"96:jIbRirXFiUUNeEihYsRWFkAnY6iLcVj5/888P/iIEb0ErpK0/g7PbteK0ClHd:jtWeEiuoWFkAnYneja/SNtCIKJxd","tlshash":"a8f1d937b7801337543788da60b8f34f6071d11d711352a5eae35e1baadaa633c26778","dom_hash":"domhash4299ad0956eee0c73ada91430f7e2472","first_seen":"2026-09-04T16:37:12.579407Z","last_seen":"2026-09-04T16:37:12.579407Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mygirlfriendjingtian.lol/","fqdn":"mygirlfriendjingtian.lol","domain":"mygirlfriendjingtian.lol","tld":"lol"},"ip":{"addr":"104.21.45.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:37:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"mygirlfriendjingtian.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"basednewsarticle.com","ip":{"addr":"172.67.135.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":281244,"sent_data":1489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mygirlfriendjingtian.lol","ip":{"addr":"172.67.207.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-27","domain_rank":0,"first_seen":"2026-09-04T16:37:04.466123Z","last_seen":"2026-09-04T16:37:04.466123Z","alert_count":2,"request_count":2,"received_data":906,"sent_data":1017,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"basednewsarticle.com/","fqdn":"basednewsarticle.com","domain":"basednewsarticle.com","tld":"com"},"ip":{"addr":"172.67.135.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91167530873ce47efb44271462788130","sha1":"1fcbcaa1ddcbc00601d940f02fd34b776e1539e2","sha256":"9c7b84d645ff9f13d5e79b6df8eb161e97fed9bad954c14837fc37618b66ea37","sha512":"018a73418b456a37fe3a3d13e80cb7ac3a23f6e74bdf121d9962c0bb530c0cb6bad3e134ca50e0b9fb4706c008f9bc1f6492a0edd16a912e3b1de2054973e5db","ssdeep":"","tlshash":"71d0a7f8b2802568c65924366d3fc78a7934b500a56130e0c1dc416b4af2e911496fb4","size":251,"data":"","first_seen":"2026-09-04T16:37:12.585616Z","last_seen":"2026-09-04T16:37:12.585616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basednewsarticle.com/","fqdn":"basednewsarticle.com","domain":"basednewsarticle.com","tld":"com"},"ip":{"addr":"172.67.135.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"632910f2d705ec6c4975e4cd46fe4ab6","sha1":"f6cef48dc708206c56c8c7eece45c84916073d32","sha256":"35bf515ed6757000fd813d428449f64cdf099295bc643ff803512a33191e8839","sha512":"a282a300dfdc8c06a48dab24616f840a1443283039e24da53d50b6cea94d59fffbe1f7bccabb0b91ef84824fc19662b2f20cbdd012668a85d9b3bd1737f0690e","ssdeep":"","tlshash":"e2418a8173c80b726a7405e61178534bd1f5f07e343225d9cbe78d2b75799a2386c774","size":1972,"data":"","first_seen":"2026-09-04T16:37:12.587027Z","last_seen":"2026-09-04T16:37:12.587027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basednewsarticle.com/script.js","fqdn":"basednewsarticle.com","domain":"basednewsarticle.com","tld":"com"},"ip":{"addr":"172.67.135.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3170e2ebb5533b0a2124e751242b60","sha1":"b686a76a9ed8830de5f4389aef40486f592e0b36","sha256":"8178ee666aa623c69adf1a9847ad8bd88c0ce4536bd4312c14f589645881d144","sha512":"0add7f7afc36637ed18b8fbb3c1b6406fe7a2f4b869e42ee2c7bde625191dc4e03503f8a85973e734641dcc5c8c76dfd362aea25853a3f3bc901c16d54f88640","ssdeep":"6144:CB/tZeHVUMnkDKeKBskuBwlyGrCuTGEKstAZkOPhFTJBR09ASn2OTDlBb5bNf:CB1euMeVWGEVtAZkOZFEX","tlshash":"20443f45298ff59cd8e852cc2a714ba9889f91e7c396089cac8ad375e0dd7cddef0244","size":262968,"data":"","first_seen":"2026-09-04T16:37:12.581228Z","last_seen":"2026-09-04T16:37:12.581228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basednewsarticle.com/","fqdn":"basednewsarticle.com","domain":"basednewsarticle.com","tld":"com"},"ip":{"addr":"172.67.135.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3b7029fcfb7de52db4ff381e5661ff6e","sha1":"e47f1b254d14e52171c70d83eabdbdd14f713726","sha256":"9e2bd0406c6a3673848d5532ce6ccd386c9656389638602997904662a4abecd7","sha512":"8eb552f6edcbf21f030137e1ae0762d864b683b4b14ae37f301aafe830f4f894385bb0defd83d92397942c501e68bc39a50afc547ba464d72e5db10fdf04125e","ssdeep":"6144:1lhevNfPwNKEKPIow5EpOqFEuTGEKstQZkOPhltvFPMpgYn22tRnbbTbzU:1I5oX4GEVtQZkOZlya","tlshash":"2d442f45298ff59cd8e852cc7a714b6988af91e7c396088cac8ad375e0dd78ddef0244","size":261715,"data":"","first_seen":"2026-09-04T16:37:12.588797Z","last_seen":"2026-09-04T16:37:12.588797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"basednewsarticle.com/script.js","fqdn":"basednewsarticle.com","domain":"basednewsarticle.com","tld":"com"},"ip":{"addr":"172.67.135.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://basednewsarticle.com/","date":"2026-09-04T16:36:35.633Z","timestamp":1788539795633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basednewsarticle.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 13:34:08 GMT","end":"Thu, 26 Nov 2026 14:32:19 GMT"},"fingerprint":{"sha1":"45:5E:C7:5F:45:77:05:E1:30:8C:0E:9F:F5:30:EC:65:7E:79:7B:D7","sha256":"51:B6:A2:4E:99:14:74:AA:D2:DE:FE:60:8F:BD:F9:31:BA:04:A1:11:8B:69:7B:94:4D:DA:28:F3:AB:22:86:30"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: basednewsarticle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basednewsarticle.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 04 Sep 2026 16:36:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vNWcdcfWPeBnnP0xye3NyITI5QwOMQVhMQfBVT5O%2FRgotpAtNysEckHZQnBQ20arVX3rrZW8TTRr97PyqaxItu6Zh9Y2xYl%2BGx74zOyllFIsaPwRgh1rM7PrIG%2BcoQCkBGvQDVq4Q%3D%3D\"}]}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 2348\r\nlast-modified: Fri, 04 Sep 2026 15:57:27 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e69fab886b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262968,"size_decoded":75555,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"de3170e2ebb5533b0a2124e751242b60","sha1":"b686a76a9ed8830de5f4389aef40486f592e0b36","sha256":"8178ee666aa623c69adf1a9847ad8bd88c0ce4536bd4312c14f589645881d144","sha512":"0add7f7afc36637ed18b8fbb3c1b6406fe7a2f4b869e42ee2c7bde625191dc4e03503f8a85973e734641dcc5c8c76dfd362aea25853a3f3bc901c16d54f88640","ssdeep":"6144:CB/tZeHVUMnkDKeKBskuBwlyGrCuTGEKstAZkOPhFTJBR09ASn2OTDlBb5bNf:CB1euMeVWGEVtAZkOZFEX","tlshash":"20443f45298ff59cd8e852cc2a714ba9889f91e7c396089cac8ad375e0dd7cddef0244","first_seen":"2026-09-04T16:37:12.581228Z","last_seen":"2026-09-04T16:37:12.581228Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basednewsarticle.com/favicon.ico","fqdn":"basednewsarticle.com","domain":"basednewsarticle.com","tld":"com"},"ip":{"addr":"172.67.135.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basednewsarticle.com/","date":"2026-09-04T16:36:35.718Z","timestamp":1788539795718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basednewsarticle.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 13:34:08 GMT","end":"Thu, 26 Nov 2026 14:32:19 GMT"},"fingerprint":{"sha1":"45:5E:C7:5F:45:77:05:E1:30:8C:0E:9F:F5:30:EC:65:7E:79:7B:D7","sha256":"51:B6:A2:4E:99:14:74:AA:D2:DE:FE:60:8F:BD:F9:31:BA:04:A1:11:8B:69:7B:94:4D:DA:28:F3:AB:22:86:30"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: basednewsarticle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basednewsarticle.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 04 Sep 2026 16:36:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B40S4Gd9hp9Yi74Kt40oHtJ503IIgg4m06ApXku6Zl%2BRHly0wSFvguqtTiSH5xc2eFEGN6bhmXqv6TePHK3FYySA%2BH5zr8LHKPFa0Zx0bg73i%2BkFFmmFF7Q4ZBkHT%2FrbedWcvLdupw%3D%3D\"}]}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nage: 2348\r\nlast-modified: Fri, 04 Sep 2026 15:57:27 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e69fb4890b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8149,"size_decoded":3977,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8148)","md5":"652f936e27448adc06c4fecba5a6841b","sha1":"f5f4bf7aa542e4f219f24482389c683097c6e522","sha256":"636470cb8a7ead5f6572cabbfc61b5eb22216ea8225b5c7310d450df88603cc5","sha512":"64fa6ebaf03f69e15c2bb33070e43b0db72c0ef15b421dfdddf2a48e620969ab6bb245d9fa4198ce2a784ca08856714aa01f6a787642c91ba642ea8ff1ad718d","ssdeep":"192:AWeEiuoWFkAnYAwySNLRSoochPeLSD6+7sCj/SNtCFKJxr:BOuTFkbT99SpJxr","tlshash":"50f19633a7e0033b906a5ed5f07ca71f1122d319922a9154e9e35d2b959b692bc2b33c","first_seen":"2026-09-04T16:37:12.583131Z","last_seen":"2026-09-04T16:37:12.583131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mygirlfriendjingtian.lol/","fqdn":"mygirlfriendjingtian.lol","domain":"mygirlfriendjingtian.lol","tld":"lol"},"ip":{"addr":"172.67.207.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:36:34.864Z","timestamp":1788539794864,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mygirlfriendjingtian.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:36:35 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 28 Aug 2026 17:35:12 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4srTJ5q%2F8RWMI5%2F%2BliI7krJm0bVlCskLvxIxx%2FJRTDqU4yxadG4vui6wE%2F%2FfjzLouuKOg3fNYtWqzsEP%2FaWM%2Fac8n5LLCLqt2ou4Yk4xLvssEJsnZ4JVSet1BfmPRwKDZx1uzA5727mkLjg%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35e69f69bc85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"mygirlfriendjingtian.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basednewsarticle.com/","fqdn":"basednewsarticle.com","domain":"basednewsarticle.com","tld":"com"},"ip":{"addr":"172.67.135.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:36:35.409Z","timestamp":1788539795409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basednewsarticle.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 13:34:08 GMT","end":"Thu, 26 Nov 2026 14:32:19 GMT"},"fingerprint":{"sha1":"45:5E:C7:5F:45:77:05:E1:30:8C:0E:9F:F5:30:EC:65:7E:79:7B:D7","sha256":"51:B6:A2:4E:99:14:74:AA:D2:DE:FE:60:8F:BD:F9:31:BA:04:A1:11:8B:69:7B:94:4D:DA:28:F3:AB:22:86:30"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: basednewsarticle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mygirlfriendjingtian.lol/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 04 Sep 2026 16:36:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6JK25eMLI%2FpnU2VljuvHC6mmVQaIhOpqRhejAD4dQiY8Sam7VHwXq6ZG7vo9bZnV4WzvFcFRo3BPPbBm3uD%2Bbmx0aygzVDcdnd9%2Fx9YE5LYFBdi9TBhG0j2ZySSeLTU5MYCz0nESg%3D%3D\"}]}\r\nserver: cloudflare\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a35e69f99875b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8149,"size_decoded":3889,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8148)","md5":"652f936e27448adc06c4fecba5a6841b","sha1":"f5f4bf7aa542e4f219f24482389c683097c6e522","sha256":"636470cb8a7ead5f6572cabbfc61b5eb22216ea8225b5c7310d450df88603cc5","sha512":"64fa6ebaf03f69e15c2bb33070e43b0db72c0ef15b421dfdddf2a48e620969ab6bb245d9fa4198ce2a784ca08856714aa01f6a787642c91ba642ea8ff1ad718d","ssdeep":"192:AWeEiuoWFkAnYAwySNLRSoochPeLSD6+7sCj/SNtCFKJxr:BOuTFkbT99SpJxr","tlshash":"50f19633a7e0033b906a5ed5f07ca71f1122d319922a9154e9e35d2b959b692bc2b33c","first_seen":"2026-09-04T16:37:12.583131Z","last_seen":"2026-09-04T16:37:12.583131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":25,"connect":17,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mygirlfriendjingtian.lol/favicon.ico","fqdn":"mygirlfriendjingtian.lol","domain":"mygirlfriendjingtian.lol","tld":"lol"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mygirlfriendjingtian.lol/","date":"2026-09-04T16:36:35.515Z","timestamp":1788539795515,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mygirlfriendjingtian.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 18:16:15 GMT","end":"Wed, 25 Nov 2026 19:15:02 GMT"},"fingerprint":{"sha1":"CA:EF:40:97:D0:10:5D:16:FA:3F:B3:16:53:88:D8:A1:28:9A:3A:61","sha256":"DD:92:71:67:66:CF:FC:BB:71:F2:C0:1A:41:20:AF:8C:6D:C2:C7:89:59:81:DB:07:45:AB:E7:58:89:34:FC:6B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mygirlfriendjingtian.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mygirlfriendjingtian.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"mygirlfriendjingtian.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}