{"report_id":"75de60d9-5690-4598-880c-9cea754cba66","version":6,"status":"done","tags":[],"date":"2026-03-04T16:41:15Z","url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"172.67.210.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"title":"Blockchain Rectification","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T08:57:29.345088Z","times_seen":17833421,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"172.67.210.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T16:41:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"multinodesyncsolition.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-03-04T16:41:16.437966Z","last_seen":"2026-03-04T16:41:16.437966Z","alert_count":26,"request_count":13,"received_data":5004258,"sent_data":6757,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7ff7c357900e89f3996440f6d993141","sha1":"009487d13786f6ccac192422512a76a136756038","sha256":"a6359fa762114ac2a13c85832e5e47eab47a85896d116d4e8976c5e9d22c4bed","sha512":"954367cce1dbc5ebfc39ad424582a456f7521d76c6959e4a293aa07f61fcbff0c443222bbb599c323d20770ed732563fafb2883f630901c5d318d81faf0b68dc","ssdeep":"","tlshash":"72e02b286aa755fd36b73591c71fb240e86500735085d801fd1cf58a0fc0e1434b9fc9","size":319,"data":"","first_seen":"2025-03-07T16:16:50.313512Z","last_seen":"2026-06-02T08:58:23.961977Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/babel-polyfill-6.26.0.js","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2a19d3cf7c8eb046bb4234ef5720439","sha1":"ccbdbbb366753af36634c0c3a2d5d6671fe6a716","sha256":"55b69ac4109f5a4bb3c216b41452993a0927695ec5065b02f4e2a3745d7100e8","sha512":"91b885749f84abaed735b5e8d9573775681cb22d496343952db178488fab6a4579d29de7157e756290a1c8bce03f42e80e7714e4a75442772fd936d06cc91579","ssdeep":"1536:rfBB4VjBxx0fbsCjDoBm3q8M3vY3vb+YJegn10H3yCA4aQgHcLdTgxIZ7g2+YY:rfBuY9X73qWZ0nD5ExSa","tlshash":"3f9410c5599695a9be0501cecc72ed44e4184d13bd6cf193eaedfec1702af62808b36b","size":432230,"data":"","first_seen":"2026-03-04T16:41:19.431996Z","last_seen":"2026-03-04T16:41:19.431996Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e978b74bcfd23cb8af662a4e3228a921","sha1":"a0d6bb264a6034cac4b66866b87603624d0e9fdd","sha256":"6ae4f850e8f79cafdd5d05bd283998fe092b41a8411f08a8c42343fa95119dd2","sha512":"e0a47c75f6476009f735db096d1276eede53c9241714b5ca6bd2e5e860b060a08a27111e3068b2dbb8923886aaadfe5b8c48c5085d315eaac36679c402bd174d","ssdeep":"1536:3VVoZv1utVbTun3vW3vLeaz1fSh7g2cuzIQrRCHE1xbUxybPGV:3VVwv1utVbTuozRShrrfzgxEE","tlshash":"da643fe4db97c0dc8e55118ec8b3f805e4544d23ce6cb4a3aa2edec1761af66818717b","size":308588,"data":"","first_seen":"2026-03-04T16:41:19.433342Z","last_seen":"2026-03-04T16:41:19.433342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/22e9a99a-6065-4427-9dc1-71ec7fb0b3fa","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-10T18:12:06.649103Z","times_seen":5109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63afcb80a028dedea1f9b5a70c4f0391","sha1":"1425284a0a9f74b1faa85f1d3524151015c4bb59","sha256":"25bc91c3c40ea75713f438f6780c69e28a8afe1e05edb716f1f6205f627cefaf","sha512":"5ac25311757f73e66a340aa38e6c5f1532122c3c8ddd0d6afafc139a09f276720bc457b83ce4c9069fa80248f69c3d723a4c185259dadb6c1083acb4b12f36f1","ssdeep":"","tlshash":"06e02ea82ee61338237b2120831fd28037e48043a0e4f8023a1ce1cb0fd2e1000bf5db","size":292,"data":"","first_seen":"2025-03-07T16:16:50.323665Z","last_seen":"2026-06-02T08:58:23.963206Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca27f38d30cfb60c860b49a49c013395","sha1":"afd8e7e51ba73eb7fcdf46c7564b9bd3ee4f3367","sha256":"8c169d0f39842ecdcb87c2e3aa3f9d85c7c02b46ab066e408e83bb575dd8f4ae","sha512":"470c63150efe5ff80bb5e663ccc29468c722d48e81475e9d475408b4d317694ff7eca932ab8d4e0238296733bb554fab32701277030b616754514aa1ea907a66","ssdeep":"384:2DUX/6iUlcIwNhefZuRfX2wwr4Xoqx+7NH6R7hW7a+eZIdONAFH:kUvuc9heBuROwwQx+7NWF/ZQOiH","tlshash":"7ac2f6c87ed7b46453766cb509673ada22a96cc8f00d6918c320f4e87de2f5c4d66cac","size":25873,"data":"","first_seen":"2026-03-04T16:20:28.80863Z","last_seen":"2026-03-04T17:14:48.412978Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"712e8511315ae22626c9578d1743555f","sha1":"861b05ccf4bb0dd0f43bdcb7efc427e2ff00fd8f","sha256":"ed682480f3f2a5964c5e022838097c285fa4f511e74002111e9a79fbe975fc50","sha512":"da36216574bdc2d5dcdbc386e3c160b5d937a58b623b01e001c7d7b8833b963d199b941269c7f5fc2a245c8bbea4857a33f8e53999876fc91bc8cac62aee4a93","ssdeep":"","tlshash":"70d0a7555c75853069d5014a60b6e395266020607621e64481dccc2f6e21ed355e1558","size":217,"data":"","first_seen":"2026-03-04T16:41:19.435528Z","last_seen":"2026-03-04T16:41:19.435528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"290f2693531b75e4376c03efb2e445ba","sha1":"b7d99187eb7703bdc3e0d91432b1e6108b57bca5","sha256":"b2464a6e184f8e48f9dd9b02483cf8f9a049eb5ddf47bc900d570fe387613ae6","sha512":"13b68e7b1f8f4e9278ab87f46f2f9d12a9c7a48351d18265afce4d59c501c11bc510195ba10aeaf6c5c17cfd996a9ce4c639c162752cf6ea4b026e5fd6875e4d","ssdeep":"","tlshash":"5fe0863935761574097b986fc74b934b7da2141b5001e8167d4c914b0fa4f1034e6599","size":350,"data":"","first_seen":"2025-03-07T16:16:50.325983Z","last_seen":"2026-06-02T08:58:23.969339Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20ee60df026c99bb0e8ff93433453489","sha1":"80b35aa33f63e8bea13c555d54de90feda362195","sha256":"8b117f01b6c432ed649a061340b167e9bc89220eae49e0fd63761d3c25add3ed","sha512":"a5ff47338284be3f8d612cf4cf9e2022ab8d6050967f9a2f8092ad3302abf1da8d0c608f84f0b9d59d15509d4f571b920e45073da83eb7b97c6854899a5e4e8c","ssdeep":"","tlshash":"5311c4757e165534d9c5814b317ee7a93e3250717a02e184c36ccc295d18e8714dfdbe","size":902,"data":"","first_seen":"2026-03-04T16:41:19.436893Z","last_seen":"2026-03-04T16:41:19.436893Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d725341fbcd4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25873,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25873), with no line terminators","md5":"ca27f38d30cfb60c860b49a49c013395","sha1":"afd8e7e51ba73eb7fcdf46c7564b9bd3ee4f3367","sha256":"8c169d0f39842ecdcb87c2e3aa3f9d85c7c02b46ab066e408e83bb575dd8f4ae","sha512":"470c63150efe5ff80bb5e663ccc29468c722d48e81475e9d475408b4d317694ff7eca932ab8d4e0238296733bb554fab32701277030b616754514aa1ea907a66","ssdeep":"384:2DUX/6iUlcIwNhefZuRfX2wwr4Xoqx+7NH6R7hW7a+eZIdONAFH:kUvuc9heBuROwwQx+7NWF/ZQOiH","tlshash":"7ac2f6c87ed7b46453766cb509673ada22a96cc8f00d6918c320f4e87de2f5c4d66cac","first_seen":"2026-03-04T16:20:28.80863Z","last_seen":"2026-03-04T17:14:48.412978Z","times_seen":8,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/banner-BOS7ZZIr.webp","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /banner-BOS7ZZIr.webp HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 28 Feb 2026 07:39:48 GMT\r\netag: W/\"36cc8-19ca3307763\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 138054\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fsdanr208iZzOfhebUUba9jZaY9xhyF0dVmFL6Pz%2B8V%2Bz16Y56Nt1rSx%2FFdyo3jPVgurjooqYHcVvpdLIh4y9%2FAvzQs2hIoFCi0q1qsFlV3g4sPeMWW9xGs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d72533fff434453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224456,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6171a4d43ee613e3837bac9e04f0794b","sha1":"fe513627a5b9cbb3a5a3cabd5a613d9c58344964","sha256":"9a3875c6246957d22e66571044d18b73845658889bc56faaa510d694b245b35c","sha512":"8fd1179d0579a2cddecdc4245d3d3f2a1614c0fb637d12679a7e53eb76185ff66abf209de4db7c527d4e1781f4ab65b1ca4857ab8a7d71f7d3b91c7521832d46","ssdeep":"6144:fEKYC7RJR3ig52rcK/X0atY4CaQj5ShSjOKjGQm1A:j57kAKfLtYhPlShSjBXkA","tlshash":"3824230e3d1abee9604efaed53d3ae29cc07ec59689cd46a3150c855b212c9ded5fc20","first_seen":"2026-02-13T00:01:10.331247Z","last_seen":"2026-06-21T11:27:07.851201Z","times_seen":10,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 28 Feb 2026 07:39:48 GMT\r\netag: W/\"bc80-19ca330775b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2BomiFIE7gArHWHRTt%2F9WGofHi7pU6ayBe1jIiMYL7UnZGjvekYnd02HFf8k7efTcdVjZcZC%2FaaxBWDhus9ZetGjPhWZ1EQsaLswt21Z8SnnjFsk6ufMeU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d72534058004453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-11T09:00:52.472332Z","times_seen":26279,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/secureproxy?e=jscdn/getFile","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://multinodesyncsolition.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://multinodesyncsolition.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"mi18a5bamu6sso4zrovc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHnT0PV3qdf9oEZlwGj5v3clM8sL395ZvtFamNd%2BnTKzI2%2FvthxTBqs2Sp4BaOkYPV2hN5i0easpGPUrVdTsxKOqAtfsMcpt4AaoL%2FoOmAT4Tw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9d725341fbcc4453-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4116092,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d42886dca531fb3d58a7fd5690077bf","sha1":"09fea557dccb15f6d6c0e07035f75cb57928e148","sha256":"b60bd92c460750850751d1c8035bb96eaddf94bf8e6c629f3acf9540c10ecc57","sha512":"097574d7db5be201c58fc571c487a338a46b2a65f267b044a31e915dd528f553ce8845ba16b25a46dc3885952eb09fed548504745a899a382ef9b9591f26b449","ssdeep":"24576:Z7M0RShYQ/KKBAlPh8KcBCLqSLGcuP6uk:Z5SSiIhY5rk","tlshash":"c32523b91e0a9860df9ad64d74ba2d1a60204d814d8de5f7c2ccfdc631affa080d765b","first_seen":"2026-03-04T16:41:19.427551Z","last_seen":"2026-03-04T16:41:19.427551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.4455262250182634:1772640442:aZoj8MXdKB7IlMyzgVif5xuzsQmKP_JsPrEmGMBBv00/9d72533eae8d24b1","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.4455262250182634:1772640442:aZoj8MXdKB7IlMyzgVif5xuzsQmKP_JsPrEmGMBBv00/9d72533eae8d24b1 HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12167\r\nOrigin: https://multinodesyncsolition.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12167,"data":"SWTtFjEzBCVvvBwEvp7E6BvBpDTpopbtIg-tB9pMt0wBYwGbA8pntSwjgGpkpKKp98Gep8JBPYpCwBUwrbcTE00bHTpH66ppC3pSlgMcpk8tB4IVoQSMMpkZ1NLv+$hIpIXLd9BIiCTKIX0VJpVHSg-mbtt4KqyaIyIVepZTESCFTTKLjWD-xGD-Cp9Nbq00eBgtpN6jWcyTS-rr6VSSJp7RZpFJELxovp87QPMspkfldj-$T6mvH5-FJp7HTpV+9GUA7NoAwpkaQNdsZLptpb6tvJwMppiN+ZiMEN3-pr4tKM3gWNDHJpLHTwEWNVCXKoL+WAb3pbIe6TotwJpEU7aCELtd9b$9F$Ipk3Xp4mzNIpBF-D9OIKMLIpNM+qTLsRj57dK7d3N+ELLridxTgYkUxCXDLLhmJBIAwTptsN6f1YtpU9fBZPGePWCb3ofDJKCKKvaPC2dBGiniIpzHbTppcLFnvFtZHj7xlxtO3jxH6s-HqZ6V8cfAXfsHXixeQlP$co8Rp9LM-Xb6ToCo7YWtVEoekvKTIWD+d49rbTd9XKmssB8548D2GhkJkof0O3d41bG7tKP5sRPKBdCmXDpVfn337k2O9sVo2VaCa5ZLy0+3vONZpf4QPbMfs3bb+MExh799w9lnEhLp1Ll-o06jKHjiaofZp1ce9VokwresA$+J5OU6ioB+6NV6y$5jpDpNtEGd4U9qs1tYJbPj6ET6PG$Q72qbO-7kAsMZ$rxF6z7TdjEUl14AxFnV9rMTXd-W2fvEEGI-XtpkOC$T6FCETSEISCrI6BAPaZTehEtSwOjASWLWTpk8gd9LmUopWsUsljaJxCZwUm9pSMP0JNpenzYBCF+8tmpw8UBSwB-xb-cVeVJMEh9IpMhbJBMzI-K+Ub-JUtTvZaBCT9MOsTrEtF+Za-jejF9xpD+JP-wt+ib8tM9p5x56TIUp28d7gBjOKD6TXa19pxUU$CtTfTbXte9-8tnFbmMSN-v36ZLYVHCT0Bn6Tlin3by7jLmnHcIIWrL4ttmcSSwoWEKLTK9-SEWCjNVbAL83NiB3DFLmU-7IbqmELmsRUyb2i1n3i4j7j8tDbJXjps+PD4CJXa+wgfota-OKmFGycV8DKEO3SpBkSEE7prxX4BxLB4tbEGETOVUn+2+JJaxCZoa8aHbVCSxvJ0p44Kcp+G-8pTPwItvEeApGoHtFpsHmkDDSiE3I-wV-f+0SPE-YPS8JYG3TVwBN9HZUjiHxNISFBLROWYx1kLMp2ITeYjC+d27blAEPIHDkFkepMtCKdCtk3lrnpzI-6aJwp4F32UtI-+RMnCXUTvZNadQGL+7$ZC6+7jMrq-wmtI5BOiMA4wBM5nCz$aJJaR9pLRs-1Yp6K-txdeJ8tGX18jW21bBsRpgiA3w8apWwDTl9OTVeJILBW0lMVCITOABOt3X9TwDR9615AnorUvHJrFpMV0YVp5Jmt9EeBemJZ$6lk2odOY2SFRY23sewZBZDFImyXJk+53mmTpDszmefrydv-HyjUPp5$L2e58aX+UOeOgycppprqYpwc6IE6poq8tTIXVp6t-Ef14gq+slYN-xBedA4NZtvETpf$99pQtPE7VVVXcC6zpT6JOWobmXJ8wlzvZLbFsQpp$aJ3-lIcV1p39D$tMhzBDFT6JLUbBrFsRXa9BJ-tqXvrvZrnk4v$bD6iGWw-YTRVXNJkf6MsS+FsBT9TkEtTVbj4TQtT61SnR0xv4WQtNNfUo7ApyQZ8UNdQKIBWDIk30IY66hc6JYz-VYkzy6y+1KIMPbzL3MwUMipYcJFBAIGHzVMSjxx8kxxIMEFXtmnA$HBa14GCJFL6x-pbSR7-3s-Hqjv0S0DNjchvgJPR-GpsKMMplVpCyi7mxIa8VJCn63SEds34eiBBPkzIaEbjyIvpiEt8IreKIPLU-xMkMRlsTtBtqKPIXSH8tJtVFkNlllbRYEHa7V$kfiX1KWlK3X2DptE-Gd6L7AGftF+nPsS7H94PQM2GtBM6obISpD-VboXT0W$DXXNTpS6jp30bpsBsGlMM$73WTbDHVSReGb7g+zFf79kM1VW3-6EjImhipslUa-wXBQ-jtgsBUr3dicMk8UPQGc8KCvJxTy$Tt$jTkd8EaXHmXy3rTtFYtGtNkxtpNsveX0CXZcC6nwTNTmLOphQLBsgFR9gE-Bns4gvxFZzDE-ynNcIHaPss2b6GUbP63lgizRo$LqjDBTEeiI4aYbm6g$14$nnVVq2XMOBJUUGO2F736XtHnd3LpKzVi6t6K8-lfjn-ATctxqYA99eLtxsw46knw9CwFzZevH8Rvp4v69jlMTvd9RczVPUsXTA-Xtcdm2Rlt8NmCTUU2kLz$SsXmPgbbxT-baFPNxGlQbiZEKk3gXZVw4PlpLKgXXaX2g$TFZH0IXJZ-cQZit+p4exZ4ZJpj4oxJVk0CGmmkf$TLKUM7Io3dwpUNPRJrPKKtjLMt6FmTGYnwFjNU6o1sla-w7BShGAMEEzPZgN+WzlO-9DPgSMBFBZLCdhYpnroHpV9i7rhME4lJBAPb8tQEGbjGeq+MphmeZWPpzW2368UsWiJJTtFnrInMKNBN4xYfvAnPcxStF6GpINZQQS4xp6MzTAbMJE7jQ82OXQm3MTBJwccNpJvfvkebMEAiZyS0PTsY9asAVg2UDwiMtS87BPc8$x-ApAH8fvXo5M0B1JIHiksq8psIpjbYJb$Xxx9iqP3hhBLkrv$XfqJTUGg4CVIg+rpeFI3ZzjvTEUgzdkAIEp0TblwFZMb0NNNJjjA8rD7V6OZg+Aw+XsYosUIiv3I9EvTS$x$Uaz6o$bCcTE4iNbwI3Sg7ixZS31Q+VWS9irCl0UyzNnH6UbLwFsf62bfw64kTCj-BUo9EVxRStsYPCCvoo2f-YFpxWajQHVCSR+UBvbDgQTIItpM99Xdv1J$UL0o$6-3IW0BDH0Sdvjm8rO3ro8K-XLI2bUpecvBwBaDC4YFEH7pw9$tZaCVJ4yxgcGQKvmRc-Ag-7NNqnUr8gLSxdGWd+OLh-y1W$j97PZ-8pnc0gfBM+1bVkIt3yv4hrFodPL1VJI3J8hQlVCwTq1CsIleJ6aUL1$NVvU0lQ8wBW8Zc7NnLFs29PO+UVqLdjasaylvoaFhAzGpLkx3CmIbK6KjvR$MlI8hBMJSb7-867UesXRkfYxwkLxOrgPTHnC58jsEt$V0hyxLva8UG264sUHVF06E$HDXiDtrJTg2AhITlGpo7bpXyIPDkn4+tZ3CZWwBJPB6ecQTBPfPc+HSgg9mYUHxPrnTslcwQRKh9BjI4dzPPwQprQN2wzGKp5TMB8t1z1K8x5wAAZC+n-YE47mDa-sgr5cizi3YIlQrYE3qrlMGaD-BfIQCBmvTw9fDSN9BSopEpZZ+mMIerzjjIILvKg22hbXDl2LTj2hi2BThXqlLhw4ykDPVbBK-6+b4hFSAGFXDPw6+BqXJCOb$fRXobNtst2U+aRv4U3sYbLYrZa0TE-LBkLGbTYZUPN2DbNji6ekeSUlUs-73tmhRkEjpy8BSamjSkxsxlbLCBSkiEWhDElBNs0CEhDEeI52NB10ZYphpz02B6WBJEcP9XfXRPjS6l6jJs-9jU-vxXysaCvI-SQbI4WLBE4ackiaXtjtZ0JEcIbLJ7klLlUht-THFLp$raLfLtZLGv4K0lZ7DkvhCFK4N2Z819AUfXKUHBjbrhTYLSVlIZbLQb42Pk7h+k$b4lBTCKJBK08ayhH4ysaPkholsB32Vl6YqZwPcIjbF20C4s3h0ZOsWAnX4jtwBUwA-z2I-pZyBpst329TZZBYDl3A124Xvf$j0SJp-BCMvZGMstMXoLWnWAofWxp6Jl6pZKEU6axb3zFhwngLYkeFMlbSJKdUeBhYCi5SlGOBOSJ95hrs9K5fvPRvhIWUBhCV0Y8f0XNSBCJVbhHLKj4lItX4xhz7k2DCZ0HatNKf-9Ksrj+CY2Qv+VHpNYB8UG9Ui4JhwT5KspfBlGbhB0QCS28vvBwFI2C3CM0KKT4XRQIKTle9Nb628akZ3ptVeM5Zw0enS2N9-LWwbCbCSv4f0Pc6zIJpZ4ak1v4aXK+0NEHIzHXtefBIz-3jiP2p63hZ3s2bT9pH+EpHFVcKNT6x63-E-ky9eichBC3MTb6TBYJlmGTkJsJhcBmU6-m0G7ZTB6FTbU8j6kfbJIJEe6DtJZB2RaYFsC-NoB7YLKEK2KJV2j+BSU6UBNRw3b6IIIpiBT4hJlYVKp-kVjwCSCT6JUzphG97-4D3iK-9gGBFrEHkit3YJveb-Fsve$SCdMxNSU97CyeXP-XNElDbJ4-4PNnhRXT-6AYhiBMZBbbpnYeCnvBE4PcCVp97p0f6Z4y9o7YtWMCl0jxALEkzgb4vXKJCfvR2D9tfB9hs9AvlILHt5KLLo-PvjyBw3beFKbb0A8Bf+aZ$s2I8vfNfahrXP83GzHwCeleBSXjPT9oA6wE8tiBBCApwj9mZwEj3OZBp-V5a9s3Bty-iUtE7GNfXpwEHx9JEY6+CD-E35j5hMNbFDMO9zU7$Vh782F7NVtYA$BHTw9AU6GnbwC+k$bsUJXwn3NQ4nSS9Y8EHihEnvHvYsfyTdvclvyD4LQ-FJIwp$$v2xy0CVUSIc6B7TQlB1E0smkL4Dxs-vSikTymLT-QSiSkwxjpb6S-Fc6gzpnXjJB5fLwVP3aCi-4kAj73jyvg6OKCsy2iT208xtiD$PMZtjEfTLGzMNtSkP8CK-$vtPy8vEGjV8VJTgbfKNpalDCeBv9wLivgtxXdv5ZISTHoHVUgI831TBfbUoPcZ2LAXm$gswhgppigyvt3FMftF4lpYsyBT0KB3ZPw0vHWnBEyFKV9Uw8G28lgAPl$792PBxpIbJp+XZ9t7PaFBSZS8oK6BvkfVUlbTCQIZ3L-6UzVZY392lEIL0Td2QV9zFPKtBzQltSK$NbYGxyy4eT3bIvKp-LD8PjShG03CJE+zKCmyjXbCmtGV+$B7DFyPXNb$vhL3v-E-3Po3EYKARQ+HH6UbITjy8ni60vOEKyHiIxh4mPcMl4vj7jxfDzhTT4mvb7qxn8BElBCxkTyGwVVM6KCEgfbHGZma6xbSD73tXB3BXG+8pP493vH$L3RngIm-MXaCe2oXb9V-bFGSgET0bI1joGOawwK8abgMOXhyLPk8WHPyl3ItB6C2rPkw68nniE6hjUl9+zMM6UbNJp-kQK4tntZTwCY8H7R-aF+ZRQ-9TbCpv91w3bMLhn1A$C8ZqY$9xNiL0T$AEy8Z3kG-+H3$a6JSC$vvAHv28PCCEXEG-CTA7y2P97CnwLCwOZdvrEebSnJG+VOkA-hA8GdajZRArfDxSfDhr0glGw3kPGEsAUwzanFha86HjyENKZmKIVbi-B+jzVls9nFFUx$$qs-29UcVzxOsaBK$9KrF625twF6ZO7DXNz+IHII3IvhCXAisiY2pFUP342bH3I1klZ8ESfO-GEdbdERiB$BPjptH-L9li61Tw4yVI$sZ0vGww$d3pHcCQneT37dM7GjzMw67mtjId$ha9Z5x00jKLZmfi2jlh79wBfi7aCvFr01xnQ-1+pXTf$MN4UB$ZL-GbSgN6EfLvtB4KprLAfe0CKKk5s0Bz8A237rFraDNjMHkOnT7wbjhTWQV-IZzmwmlki-VVyRXNT6hlBjnK4VtE$fKBzB80SDSD4eIsUlkiZryabtKV9ZIIJllQZEnBkxHB08aXU1-ZEBX16DGzzEjxVIa9SZeyxpB43+Sr2T+Tkf9c4eZK-G6zVEZnsWzWee9jI6hQ3BMWs09o$e-CIkApcaMl3It3tiHH$9iHwHwczc3vPiz3IwBwpsU88cP97Trpa-AN$S81X5UotqYfYosofP877VGL8VYfE0BStaGaZwXNaXGV-qGzyPnA$NECew6wp8iX8caKIJFB-+-3ax0h-EANB2b-EnECkWN0$aElEwQp2eUwyfyTW7y+2ljYUonG7ckisr8AXZ8+pwyw9iCoy-8-IJ3BbP2tvZEFT0Tb8K4gPW+98dzi88lYV+6ec8hWIVtEwTARky-bSJIw-FyejrQI25aMzM-K$xhUllFmhCkZD6Tv$Lzbac44xKt-cTczdZ4zmCok8azTE4nw4giEMcwHzF$hkh4EAg8AhrQrMH6jRSlDyjt+-aa9CBrNPwpt+-B2wfI$i$$$3+nNNR5iNElRJ+wdK-dQygxYvfS46DRYZ5yilmIwBSZdXiHMP0hXozlXdF3MXsNiy1288$hDBSPXfCtvXT9CeKz+EKCYl7-DmfacVmv$KpyXxcyfYrvh9eEe6J7Tg3F+IdMlv$7fnRyevbMQPgirM9$3ziQT+i$c$$QA7DBMXN6XN+GqjD$CeoGPavWLMVf7Hx0FtzGoM9nLzp5ay71Jyij5QwHdGNP0EHk5w$hn6T9w1wLO3t7H$TEILl28GXH-Crfg$lhB9osHlmBJkll+V-m+BeLmnUZBBQn23jLZrP+eLeP4Qx$iyxel83RJBWVoQ75zGCbISgTj6Vio2WIlA95jPWHIDg-5tw0z1tOt+O0tryCLPRKmZPNFKwIvSw01AiYJmQ2f3JOYW$ZCessc3Pqh9FiEqi8i6k3OM6vFzTTP8HlspBZPtZ2gVv$St0-FHgi-CeP7DZN60F2gSj3$fzhy3XJeWE$7xTigAyZo2PWYJsPoUwkiXjG-T5$rTvBw5J-RX$-die3MPRPTqvfs+4FqwP$oVUsDbbK$wjIzzRJWeJtA1A1Um2CN73aCge$OSQHWRDgK-8x6P6UG+Z5CY-HEqwq8GfQ$nFnasvtslc-PoBxpLM71s-vB90tZ42HDJGTRsdPaFGbAnnXN0swsYBrCRSMdSG13bw6m1x3IlX31TA$5hM22jk0drE-HGHP6O23+dUy6nAHRhhnClCl7fPoCcxV9xZ42X8obzKb4aCWBt6DKHsH9jHBzVcT78MM0sN3Ib4t436UbnsZs-E-b3seBc1ZkfoZ3otiepipG4eG86LQTqL7APo7wTT1QIa2gLhk$RIHY4NQ6Y-zBJ+8QMICTdb4WR8PTT4aAoPrGQGFA5yiBvOVX2dWSZejU83ROw6+ZPe9A5ar3j98ZN3vi7gUTV-oayRneOxxbs8-Enr9Hdw+xhg$82nqpGMa$+eIJfi7Z6L3jIgLsV+mKhf8SJG0n7Z0Z8gUdxEQwJhWMEzb85aZHXAygGjhI5PhZiBpstih+0EhhL6W6LhpIZjT0i4Y+$optCgmNyjonMGBSfoQFIXwZ6X$cfFfypXpI9Z0H0g42z+R7gsm1hsebbNyTt8WzhYsOm-LW3kamTZeZOK6ZeBIAdOMeVmGkMAWTYYsAzo$oxYjdqiPoisXNVBPNLDcImYKId9dCYDg0pCGCjYKUzVmNF-86iDzHHrW0eORp9a3C6Xmgg5agmDYM7kabow-XLWQ0o9fdAtzvQIaD2cDRD28czH$Py+jlmB2Sors6Q8gvoZTD$TxNQIZlMgF-Q6-jp81ytE$BZt+rvR01ECZjpRvGovpTCDwM+wT0DIrXIntZs7BWfZGtF+M3EGQCUTzt1UA+eA4akIYdHULDWrIUvCJT7mBcnnEIbt6dKJtUZ+SJYC7isXvUw4I3sGPV6WCmi88IZjpl1FnjSaoE2p6pvL6X4v4KMDwXG2zBy9ncop8-aAiDCJ4vILjFhP70VE2FtVoEap5DwpxWhwIX-XVntwtHdblNMU-8NEmf99BmNj6$VWZBtrTCCKDt+Kbp7gTOCwS4j6Llpa1ix48VJBGS+$otrwLQIYE-G3B8rCIEKVdHBEkZKb-JLV-sVMVIDv-U-0ICUXWUqtx-DiXDKx9ZLtZj-jzCGkbRn-WwbT7oL4fv+tt6UYOHTA3SEFj-kEEbpnCM7XISBEZQ6z29DST+2-otl-eIkDLJ9MsAtxf-tNEaEEG+VRi-rw9ZEXEtEsUS-GQSDSAtfeLJS-lnLCNU6K8KUSg$w6TVPXcmtJS-mEvE4-wC3nUZt4HU9jnL$IaUO-XWngEYbKWvUM-fTibIdjbVtJbG0Rh36sT3U7TwqE+FvpE4k+yt0JrwI+9IV-16zbTHsVKB6tyMTUYJTPSvtMI9bJUztjGBjL$O2-VBVN$fvgB+IMIDMfDBiIxC-TGjRZCrE16N4L9ZazMfDV4IBCxaBvD74G66ExV9ECLlYN-eIpl46IMM-6jzA69BE8bZZsGTZrwLDPnaKZttdSHGNDByRC+8MCYpQEk9Kbv8lA9v84lBSG4enPAFR6IHc9tb4V7CkAARbHIoj+vLJoTl697xoMDjXe+pfPC7-B+MVztnZecUxIUII1FUItBSUxV3IJ+yM1toIwPGhbhElMJwQ6FGTabMarMrxQQfzPRb4GXp6JNfCZF74oMsBwpVCM9T748jQTkkyCHIoX9baAwsnIv$2cEEWsnJ2DBzSJVlbTastlth-24xUVeMdU0-rbbQfkIVBAUP-+2ft96OMal9PFwCEKpUdW8sUGTcZsBb3EQsLMbtxKIA7mXjv9+ipLvik6UBEjkDv8HjkokQb++wZoWsIMYIxXVLqZg-5o9iKF9OEDWFgEISCTkwMCepEw1RE+B$bOZ5TDVzZ3MtQxxaKpNpNtI14G$k-powTTBxE6WB-mzX4JF+Ek4HjBngUO$kB3BF3VTStoFtizzmpSgwHXWwTAXFKxctQIk3$wIIBqVIEWEqp8tAkPao3g9-gkC-vJLfaxJZ+LWox9VC+VBV7p3z5Pnj$n9MakZnT9gw-pLSJBdMptWGGppzMRZ9TRGvGrijpbOjzeFASv-8TjbwTNC96Q6VNYxrKbRpoAlYCJ9eE1LWpcqUgkPBicXVFv$RqcA66+LK+Vw-Agtn5Veb3BRZdwghybfW4DR98pwFPARFdSJFDBDBZTyBGIKwKJGiEd3-KGTIXEDxcppp6idpzUAEatFY9jpB+F+OMS$ir0QHtL6C+pyBNQt8HsUrLBW6trT4wPvHEVnJsk-6wzPC4iTI-7pWJH9HyQFaPsnEQtVjcKJzT4EqJynZor+8OERt1HTIVT9C9$Mhe6tiIvITMpF1F7KtrwLfKwBVHdLNhBzbbFO9HVIDY4wCbn-jg5nqUmpIehd0vZ3t7wI-x3yBBlj8atJ4311ZETvVlx6-L6x3AgtejxaftThn$9yJspCJBp0Cx3woTPxyx13F0LUL1kvXChqU-TEICn-Q4cZKLwTyRp$kXf2xjCGZjIEoCvtHU4TUjLVXATsECE5TyxIP7vC09FarsHGn0ZASLfLMG-VChCV9pDU3GcYeJw6bUDep7EYt6kB0FxkBbWI6pXtQRBkFEVepmZTtS3z9V9pXjstb-QDyw4X87t$paJNW93aEx5HaZdtSCImMyVyVXW1G8WBSTdEJGH8zi4Pps3qJCNF8TDdoHUJsj3pE8L3zRFT07$WEOTsGxA08pCU9Mr8XDbwVSFBwtE28$WaJCJbjlYcdw3zg3a4LwBYBbpLtpT9q+COo-HtP$9kwnPht8R5UivOjV2+njLWwgS-kqEfkUj8cyvCzjqtiS3BCp-gYzcdpkfnKjc-Z1wvkzr0QKeDdgpdL6TeNOG8EWW2vlYwwVDdEKkgwv2x4iSWUswXgFGjLkgV+8fzTGOqbA-g4qMe1r8bt$k-iTvB9+OpOvjQpZpwbqNOT+e2bbZCOf4RfZOv27fySkdK-hgEz27XNppRUKFwVeh-k0TxVo-ktrg3qAO05KjEI-+vgtCpYRUDwXZye5ilU6pideNwfzjEz00tiyKQgEzmjBU-BcoMgp3znoyT95FWFWgEzskNyGOKA-fd2VpYAT0ff-FPpbyiqy-sEUD6StGDpY$JZmclRRAYoBXScIkJ6prtsoBo3imIETSr8TBttXK3OK3xyDOBhIl-2I77+tBiBhyCO4I73WP+OvU9$TBAj$IdbJ4xapjp33wFM3ygzMz-L5fPFOMQCw+8rSDaVJcDkBl3nwbaPC+ebcjKj9tH0KMR0bdBeUMWlt3G60bjBs+8z9vpZ6tKwx5jVr0eNMFqgnBKk2CteN7TDeFe2RIGXj3s6kMEzvwbFFKbVEQbCBcZ4GsKKOBip4z-k3PkWjYgvb2z6s-w4iGvElvIPM-vTX$NFKeEcIMUnMDkH-SibTptYHDZZ6lcmg-RdEsO9eNa66wKjaEyti8lm6kg1GI7--inHSFOTZThgKEj7NcFNK4xP88rk7ikJsKQCEsAOkvpN6Bg8p3ZSwBetq-BgNzwgEoaljC64K6XCb0yTFP-jBpUxJf40EvwMpyKkNn7f-XE7UMcKs7ARb-bjETckg1G9bHthBa+mNqB6PdzVCw4qF6jfokUnCpVJ3Jsz4kFUzgFZNtseNzTC7$Tb+NocZxUk3OYOF4a+83q1GBVShVs3y1-WdzkR4DbRUBcVsUGiU3B0vjtGHRAfzxFwlEVUc4KiDexVeEWjrV+N2z$gwwfJWA-WMvXZIH+VWjTt5qdT9w7JXqIkMs8dSCNQvV1P9XUtW6RA06YgU+FI9+XDLx8a7G7X6-owDsZJ3HO9XR8P3x9xeUS9jaTAt69vMWYMWElntLx19j92Kfxcb8EtISy8IZBAc1N0vgmM2TVGHtWmSpwkHfkH72FstkeoYyXhaKLcGmU$g3jfSZEAEjmiMpNn+BcNsX$myG$h8RYKibcZx+$vYz7vlKNXkmkXGo-rSlidXog41pn-kKkNmlEmZBRmx$h4f+FGmtdjLzkZRVOFgN3emYCYhfG3JONNtLAMJjMIa6ANeXGKC50mNgXAmsC85VTKrNvEI3tBYhMy6hcLXQgXdXnMe2m72c-W-rN1w5S3V2RameX27GYXf3-6QmqXjEMkYH3-68mn$jEwIspDTFemeXgEMFCprde5beXcE-3VnbHlzbzXlV$hESHdXjmn$DUNTXh3Epk9NeqNH-XONmX9bR$fXFTHl3zFGm4BDnyXYWiSzqbog-MiYi9bHXLbqd2a-3IGNVlgNCjf$Z+2Gi3$oSxjvKz+h37flAvRaVYy6YD7dF++eXt+HbGrivM+CL9JHy$Tpo9nlb9zXHxs2a-xNXmmXGc0DvJroXSwJ9XmQWXyNo$lGez8SN8ZmjTF4S3xqnngsC+t$jS4jRVyXvx3A$ibtZ1z8q2eUUQ23I7dhQGlSNKFSmB75L73XnNmloKzePszPvRD3+7SeXrFxDYvp4xBhNxJcAsa2M1Fvhn$WgxCYH7mQdbw6Al3NH8aKQVKYRhF0KXfihQBhdRmsioko33pNK27csM0F-DO69hi7jL4fPn7vNlpiWfNyT9jiHBKhkPiGijGI73gyCapCU7BBvEnLhh0kIHQvprV0pPMbT8hxw-tEsU6taJIsn9leZ0jnvDJFBfv9AaepcqhO03HRl9GbJBBD3QOyT6f3Ohrsj7jZEjSGDHUTm--EOMVZIrsJH7hThCSW4PHBETpppAfMmhpqvbtV+CT4STBcZ9YJ$ULDbIaAMroNZzGBqB-MXMSIaJVMksVHBFZFpAoMWCclDxB-DJDKVS-ppTNtpWLppxb-B0p1tyGB-4kxhBUziBa3EjVCCrIZUftj-hxSN6vMOU8nawsiQtpJBOESp0ktpEHEpfJppxUbmRdYpQMSXPPVvVCpCTsYmJ7pELxxdYtDY14nlhmmdOlnVpW-Vc2+peOHJkYtpSJeOlnXpT0xvbVDeOSwCp$DBtEmm9dAnydS9b-4MDTESpsWS07fsgmxLstEGbwkaYtp+dnnsYOeG-B4jMTDJjAmtEMFDE2$ptEP4$PPpCppE$9GbGSKmCpap5R2zTrYwphOqtopxRkrlq7i-l-e$YtpJpOrvpZTMEBzInSw4dVg-NZNb4yK1WPTZTnGVe-bV1MsUK-CwL2yMBJj8c$j9vimABBfl+pls3zqzZi0XamJDJc$14nWV$E9+m10fSILpxhVwOmZYkgW0aYWjId6w+kU-6HXtUi3Vtbt6DSzbyrpxkINZH-S$4Mo$p3p6AWxItV1mTETp6pH-LpBJEoU0Nk9AXTgBMoWpJ3FkR$8ASsb--UNNAFbN$BU3DH-VJD-JCJpT0nOzpsGftE0ahpz9rNWY7toPVhBcBNNkDV9HJFHppEjkyHtxtjf$ReO$6DBavXTwdvnkko-r52hXEpjnLk14i$EMUjp2ISJppFd99tpp"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: v/tnlO9U8cV6NGdRLWTMoA==$i52RCKSH3C5Y5OkBwJ4C6A==\r\nset-cookie: cf_clearance=oqHnyroxgBnihfdSNE3qK8hHlMwo82E0yPIsuXAnGZk-1772642452-1.2.1.1-GGBEGv_pa880mMUAHCp4fht5woKXzB1g7lIUsQs4h6rvqrfYm0VjurKv.Ftm8WagEgemz4nj8xpTGaUBTN4XFg29IqZ8iDdLkNo1zipZBuzMr.moDLWZf.f9AvhIvQEsS6W_6DDaR3nVuQwm2MQBQWX8XDEfhdeORn.UF0yxL3V9QQ9VLGrYjKi6KxjSH7VmftEEaq2e57GIbcMOFVBTdK27XQkYS__aC3MTCv7JppI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=multinodesyncsolition.xyz; Expires=Thu, 04 Mar 2027 16:40:52 GMT\r\ntiming-allow-origin: https://multinodesyncsolition.xyz\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d725342fdde4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T08:57:29.345088Z","times_seen":17833421,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/favicon.ico","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:53.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/\r\nCookie: cf_clearance=oqHnyroxgBnihfdSNE3qK8hHlMwo82E0yPIsuXAnGZk-1772642452-1.2.1.1-GGBEGv_pa880mMUAHCp4fht5woKXzB1g7lIUsQs4h6rvqrfYm0VjurKv.Ftm8WagEgemz4nj8xpTGaUBTN4XFg29IqZ8iDdLkNo1zipZBuzMr.moDLWZf.f9AvhIvQEsS6W_6DDaR3nVuQwm2MQBQWX8XDEfhdeORn.UF0yxL3V9QQ9VLGrYjKi6KxjSH7VmftEEaq2e57GIbcMOFVBTdK27XQkYS__aC3MTCv7JppI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 04 Mar 2026 16:40:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: STALE\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUA47upr1j13HIjXiOMTViIlb%2FDoykWlMaoEg0kOjE2CpHFw0ztIMVpXtslHY6Fh3eSLVEjskbU8T5VnOVSZD%2BvlLzs1hJwv%2BSrKhiDNzvU1qiARAIGFeV8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d725343af364453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-08-11T07:33:51.418088Z","times_seen":8856,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T16:40:52.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 28 Feb 2026 07:40:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTWxj94%2BQUX7ashx1Ilznm9Cv1Krvv%2BtvwTtfjCn3MyMPRooOCj9AmVU1EK9a9mAbK%2FHCrYaDrsq9pTwlHMaTBsszB5J7FkI16A3fSHUM2caF4CRtxSUTC8%3D\"}]}\r\nage: 234349\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d72533eae8d24b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12044,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (933)","md5":"6e159a67e93219d8e5789366d857068d","sha1":"f4784dac9cf5f30eb25736fec01e054b30f4ec66","sha256":"9c04e7bd1042409b55d464904aaf5ce23920ad98f39e8cb9f8aed22e3c7d90c1","sha512":"fc8b78d851a6ee13bd04c71e8fdd336471613fe0eb724fc2f35d86f4560318e86aee343196de72c62f68f5635a12088724a80ae5ef61972939b0c42d99aaaf8c","ssdeep":"192:Drh/RazuH9tFx+yUeT93wPiDPwayceLyVChpf89cgH+7Y6RJ+7icgHz7yRJz778d:DrJESZd75k3luc8VJnx/W","tlshash":"2642e86a7ee31115912392b927fb63487234c007830bcc687bdd6289cf85b94addb74e","first_seen":"2026-03-04T16:41:19.429615Z","last_seen":"2026-03-04T16:41:19.429615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":90,"dns":53,"connect":13,"send":0,"wait":21,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/css2.css","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 28 Feb 2026 07:39:48 GMT\r\netag: W/\"2b57-19ca3307770\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 138055\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSod%2Bvoaxs8BJSXyVUInwdUqU4FxywycFdq3eXu08C5yagBtlv%2F0%2Fp0apKPQzf13mG%2FXDvUNp4shwf3YRftijrYRGZSl1lrR3LjL82pyHQVdrMKAK3dtMb8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d72533fff3c4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11095,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"7ce5379d30a631e23525052e4a5046dd","sha1":"6b9f95adbe667425de7c84e06acaab404c0fb16e","sha256":"3e8644e4ed9b31195dd7681942a246b71607ad7674d6bb881447a36b64e264aa","sha512":"6afe59728dbc035d588defadfb2a3d911fb50f93c376ec79284c2aaa2ba4db41f13bb7e4fb19a52bb3a5ac0a8f0aa0fd4d64c2971a71aacdfe61f3eb0a36b057","ssdeep":"192:wTA3am3lhJiUTNe7m34MJD7TOdUm3/TJ8eTrUdm3iWJldTE7em3R1JGk:6Gx/P0NNPq7","tlshash":"73329a91042b5100e7970cd627cf3f266edc2049a049dabc2ffd189aacebdb913a574d","first_seen":"2025-10-05T02:52:06.303959Z","last_seen":"2026-08-04T04:52:06.391147Z","times_seen":169,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/img.jpeg%201.webp","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /img.jpeg%201.webp HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: STALE\r\nage: 138055\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7jBgraTnyoEXKTTMJdXCcXngQ7o31%2BB350pojMrKZ2C28%2FJG3E8FEM%2BbSKmKM3hDFeAjAuwLxO1ELycCmLdMNhl4DQaDcbwlRNWsfODahliQaNw%2FcZ%2BVnw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d72533fff414453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"004b0ade2761d30d628faca60dd5e941","sha1":"3b43961fe5016ef830c869e3022c3112cc689eed","sha256":"cd45321f258977562e2549209d890de49aa058c2ea8ba9513464de3e0a402a49","sha512":"972c73b48b96e5e7fe25392d2959b81c04eada3cb87ffe04f815da58758e9c02907ef0dc42d0a2824bc21a90f33f289e81e853d0a174d7ddae1866120f49025e","ssdeep":"","tlshash":"4ac08cae100231092a3083002ec122a834a73ba929e2c944ab82e027e8d9617c8ca588","first_seen":"2026-02-13T00:01:10.323943Z","last_seen":"2026-03-04T16:41:19.431427Z","times_seen":6,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/babel-polyfill-6.26.0.js","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /babel-polyfill-6.26.0.js HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 28 Feb 2026 07:40:20 GMT\r\netag: W/\"69866-19ca330f65b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 138055\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGmN6spcBCXG8k0GR7RTotsUIVxcfO1SLlwISSL4O9uN7gFCGAEW87HpMzEmZxmg0i%2Fqo2WE27Y7bU2yQjFqhoCVxhL5lYunK8QB5Bgk1vpIQZ0VlY5amsY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d72533fff464453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":432230,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d2a19d3cf7c8eb046bb4234ef5720439","sha1":"ccbdbbb366753af36634c0c3a2d5d6671fe6a716","sha256":"55b69ac4109f5a4bb3c216b41452993a0927695ec5065b02f4e2a3745d7100e8","sha512":"91b885749f84abaed735b5e8d9573775681cb22d496343952db178488fab6a4579d29de7157e756290a1c8bce03f42e80e7714e4a75442772fd936d06cc91579","ssdeep":"1536:rfBB4VjBxx0fbsCjDoBm3q8M3vY3vb+YJegn10H3yCA4aQgHcLdTgxIZ7g2+YY:rfBuY9X73qWZ0nD5ExSa","tlshash":"3f9410c5599695a9be0501cecc72ed44e4184d13bd6cf193eaedfec1702af62808b36b","first_seen":"2026-03-04T16:41:19.431996Z","last_seen":"2026-03-04T16:41:19.431996Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 28 Feb 2026 07:39:48 GMT\r\netag: W/\"bc80-19ca330775b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wyqAU%2BHg5CGGzfBGGHtC0fYtZ3LTzi5i9FO3LOpHWEpoSZ3aGYPiZs%2BRTrxIE7nDvY%2BDFlE9TtRnOJnKTaE9oMwa0JsyvZyg42AItfHSIcUg7OcxdTEUh5g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d725340580f4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-11T09:00:52.472332Z","times_seen":26279,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://multinodesyncsolition.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 28 Feb 2026 07:39:48 GMT\r\netag: W/\"bc80-19ca330775b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cgz8Ow%2FKRMAlcneQEP0eNutSKDiOTT%2F4gOy3o5lkAIhKdRpf2HzoHXrdajFTGWTQt6g1f%2FxkhKMuM4cTVlC949QVvUVwEXC%2B9XMZrRs6%2FrJn%2B%2F4o0de8oII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d72534068274453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-11T09:00:52.472332Z","times_seen":26279,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":376,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multinodesyncsolition.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"multinodesyncsolition.xyz","domain":"multinodesyncsolition.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://multinodesyncsolition.xyz/","date":"2026-03-04T16:40:52.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multinodesyncsolition.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 19:44:17 GMT","end":"Thu, 28 May 2026 19:44:16 GMT"},"fingerprint":{"sha1":"26:D4:70:26:03:6B:CD:0B:6C:73:7F:DE:A6:57:70:33:67:F7:5B:74","sha256":"D2:9C:1D:C8:4A:4E:23:81:7B:F0:88:FC:B6:2F:7B:E4:7F:79:FE:A3:AA:CA:F8:9E:E7:8A:AC:73:38:A3:AC:91"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: multinodesyncsolition.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 04 Mar 2026 16:40:52 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d725341db954453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25873,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T08:57:29.345088Z","times_seen":17833421,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"multinodesyncsolition.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}