{"report_id":"76e814e6-352b-49ca-aaa0-e5ea03d6ae13","version":6,"status":"done","tags":[],"date":"2025-10-17T20:53:02Z","url":{"schema":"http","addr":"magnetdl.homes/tortpb?id=7925137","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"172.67.153.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"magnetdl.homes/","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"title":"MagnetDL - Search and Download Verified Torrents"},"submit":{"url":{"schema":"http","addr":"magnetdl.homes/tortpb?id=7925137","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"172.67.153.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T20:53:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"magnetdl.homes","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-07-17","domain_rank":3946281,"first_seen":"2025-10-17T20:53:02.954874Z","last_seen":"2025-10-17T20:53:02.954875Z","alert_count":12,"request_count":12,"received_data":47457,"sent_data":6998,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-10-15T05:47:09.33032Z","alert_count":3,"request_count":1,"received_data":85963,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-10-15T01:24:42.348327Z","alert_count":2,"request_count":1,"received_data":530,"sent_data":766,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wickedsetup.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2025-09-15T23:53:18.60854Z","last_seen":"2025-10-09T13:57:03.563894Z","alert_count":0,"request_count":1,"received_data":109304,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-10-15T11:24:47.291649Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"52.28.175.18","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-12T22:34:05.876953Z","alert_count":0,"request_count":2,"received_data":846,"sent_data":902,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7c2a97da32c419a3826bba40d31f961","sha1":"462e19cefa12e4bfe37012093b3b8bd936a67ed6","sha256":"a1bb5548c5cf96fdc9eef76d5eadfb860487db54132ec3daa48161c0a5fe3975","sha512":"412868fd98ef0f361b4a1f005ff1bc5b529dcf205a7588f8a984a5177a93dfebd0158c8b199477c6d48e47e49bf9d96de212e92a9f291bd0d4512a2a10e3dec0","ssdeep":"","tlshash":"7bd0a7a9286589316195034a50b6e7e4666021507a11a64582d9cc1b6a11dd354a1958","size":217,"data":"","first_seen":"2025-10-17T20:53:05.322498Z","last_seen":"2025-10-17T20:53:05.322498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/404.html","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3a62d10816237d9b585ef8d7be4e1bd","sha1":"af243d0aefb12af6481c64fbdfc2e37d583545fd","sha256":"b336d74c1ec0d797795ab51e7f3ecd11791e5e40f0cd9ecfef3a6a7d679e4cce","sha512":"d4582b123962c9d8f71b35128840f654d75ebea41fe344549e481b87f3f3c79ad94f1e109c6e3c4b642301e84468f2b07becb935e1fc81dac7ac1af3098abef2","ssdeep":"","tlshash":"3311c0b93e1a5534d9d5818b31beeba93e3260617a02e144c26cdc295d18e8714efcbe","size":902,"data":"","first_seen":"2025-10-17T20:53:05.325708Z","last_seen":"2025-10-17T20:53:05.325708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acee6570e87b79436cf9c6a88826715b","sha1":"5f474b965d270ab01058707af767097a1ce43f51","sha256":"042261617b24b509504631411932c99f86518f7e55a940f86d9ca96a510ddc8e","sha512":"cb77c86d69e15fc24fcadba3bfe095562cd0065c57346d665f24fd49482ef86f059bd24d9f68a59fa3c6d4de9ac13f36eeba5891f9d3b81f2628c5974b0dbdef","ssdeep":"192:YHUWu3VDH0HkAe4alDAl8AOA6ALeAiPvwtkuftRNs/eceD:9lNAeV1AWZ7KDiINftcQ","tlshash":"9b22fb8bbe0db86c46b41ea1305739cbac158ebd603e5c498530d9f87d20e4a745ef9d","size":10105,"data":"","first_seen":"2025-10-10T13:01:46.657236Z","last_seen":"2025-10-22T12:56:59.717217Z","times_seen":720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a271a94c1f0e9ea35c7e920be3f8fc85","sha1":"f87bb2d26520583ec6c308c63c03b0edd52b6b77","sha256":"7633a9d85f4d268d0c257c16866b8fb89a0825a403837185951042a916a73dc0","sha512":"1fc656e13e4eab37be88c230b89c2fcdc87e48aaea12617c1dccd334665de5e128f248f8fd6c2b945fe3f7064d4865d42981a93b64bf8f34c42c4888168aa8c0","ssdeep":"","tlshash":"76b012c60080140a31f232825f13b304746700f60c44310015024630332431fc136fc9","size":90,"data":"","first_seen":"2023-03-07T13:12:00Z","last_seen":"2026-05-19T19:20:10.952137Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"690faa031cac460835ce2f6644d67bc1","sha1":"29f0b2b257f143a9b925f8bdfe20e747b5d9549e","sha256":"b1377f338530af59a3ae0ef5ca0ae54b62c4558c8428151a16733266cddec25b","sha512":"75384d4584c3d6ab4e2b08ee65963ad76aa9992e6b8e933fe2fb9be4e2759633c6185f43fc81fdcfe6811433d66eee65ac1d8840590d77e2dad324905e6e11ec","ssdeep":"","tlshash":"7751665d3e14659ac7925e3b2c3fe106ae20fb81a649d049e059f4c4fd95705f1b7730","size":2621,"data":"","first_seen":"2025-10-17T20:53:05.333624Z","last_seen":"2026-04-07T01:49:29.832338Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/tortpb?id=7925137","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8101e788c3d1b79a1fe91108c565fbcf","sha1":"4e9833edaab233d1762b2022f19c695f10411b4c","sha256":"843f79f3d55ab07b0edb80af4798894f856bce1ff56ec23b7783bda59323354f","sha512":"dca0ef617979e86b788be15201aa4a4b48f1a7f9e61f23de19e254f1f2aed4ad9126cdc619c06a43c82ce8fa6e5c5ed253499f38f367992bb1340a9b148643f1","ssdeep":"","tlshash":"fa11c4793a195534d5c5414b317ee7a93d3250617e02a145c36ccc255d18d9714dfcbe","size":902,"data":"","first_seen":"2025-10-17T20:53:05.338952Z","last_seen":"2025-10-17T20:53:05.338952Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a950b9ac52a9c35748e4217db6db978","sha1":"215ce3d0d80c5872a9c7fe43c416999fbff17a66","sha256":"10f5692aeae3769f6ba36c3284e40d775b3bad17f6bd65038cb7022b96065aa6","sha512":"e74656e7a8b87af00504422ca79bae5fa9b2bf7f81c21889fa14efb7afd3e33f3c73eaf71456999e7d1bc4bb4d61f94f8ad3a8841f946375d5b892648d231c61","ssdeep":"","tlshash":"cdd023ed2c798d3075d5034b51f6e7d4266020907711e70481ddcc1b5f11dd304b5558","size":217,"data":"","first_seen":"2025-10-17T20:53:05.34198Z","last_seen":"2025-10-17T20:53:05.34198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wickedsetup.com/06/44/43/06444360220cd3121ea71b73847bab58.js","fqdn":"wickedsetup.com","domain":"wickedsetup.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0d2e7811457f72f8dd2db354738e264","sha1":"f47cb6a242de0b1c3037bbf760065d147fbac323","sha256":"0c1dbdf797a30360fdb1e464aab7a527196feb6e3b0adf86f960051176e6a6b8","sha512":"2c9e0f0653f75ebac96003ee2ead0f6f6e2b1641ff895e46d73f03f3d04edf4224c7e5fec6e14cbcc766f9bca357274a0afeb2e4c5cc885854998c4a9c653c61","ssdeep":"1536:AIlvlV42zlFOJeH708AqNEiYNfNDIMugC:F42aEOqofNDID","tlshash":"ecb3d7483f80f1ac0267a073123fa55af1298e4e519cd25cf342e8f45dad796f93ab64","size":108497,"data":"","first_seen":"2025-10-17T20:53:05.299391Z","last_seen":"2025-10-17T20:53:05.299391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"magnetdl.homes/favicon.ico","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magnetdl.homes/tortpb?id=7925137","date":"2025-10-17T20:52:41.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/tortpb?id=7925137\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://magnetdl.homes/404.html","date":"2025-10-17T20:52:41.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Fri, 17 Oct 2025 20:52:41 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 9902ae612f1d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10105,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T20:52:42.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=NWIyYARX2eg57auVuaUS5.I_rm0BMhBk8yGmlFVE8PI-1760734361-1.2.1.1-ljQF8rap.H.9RJAWcn84DK6Gw4iegC8wBbeKa2idNuZh6iz8UTsBNN5LEbPTMuchWCH1dYriKla51KVtuDwU7PElQCVNMpNcFZfQL2OzPbCWYllG6KW6WfTiX9trkerbnbZxC5mVRZgqitH4sGgJOI8Um0VJZsaJECIspF7oz.e1y479fb9mvulyDRGdY2.Kh6xnzSlsB5omvvQs67qID02DkrGmuvfhQRriUsRZwug\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 20:52:43 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3mlIIrYUTIgI6Wmv4NZPuNgwFhd5LSPzTsMx8sReKsqbZKrxzDp%2BkYEq%2FM7waC9RabF9SwULTqXXjGXr%2Bjg6UBjWC%2BU5xwFc4fsu94tn\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9902ae6768684c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]}],"data":{"size":7013,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2674)","md5":"fe7d6986f78f641ae0493ff0a1d35722","sha1":"f24ec69e08ca5fa19b5e8a3faa6f4d701befd751","sha256":"f3eb156b6299b078b95691dfb12fbb7dca7ef1572e255ab299f11a686e18910a","sha512":"5ff7cb727e5d85abfa5cd1ae5ba399a8b8c7e03984804413a43a4c20d0b57663f382a4939c1ea34b21bff1deaccd3cb9d6cf64a3f9e1b59d81461f9a3d4c020f","ssdeep":"96:a1LV9l0wOtz6Ma6bFrTwDCGUoZV9DAt69kB3i0XamFcLUd4EVQVZyMGdZl91Y8:SLbl0wMwsyJG3EBEWPyMK13","tlshash":"43e1f913be40dc0ed3124979bd53fa083aa2db80a308ad85d4e4a579fed6f84d2317e5","first_seen":"2025-10-17T20:53:05.2854Z","last_seen":"2025-10-17T20:53:05.2854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/css/logo_text_brown.png?p=817252","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /css/logo_text_brown.png?p=817252 HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/css/landing.css\r\nCookie: cf_clearance=NWIyYARX2eg57auVuaUS5.I_rm0BMhBk8yGmlFVE8PI-1760734361-1.2.1.1-ljQF8rap.H.9RJAWcn84DK6Gw4iegC8wBbeKa2idNuZh6iz8UTsBNN5LEbPTMuchWCH1dYriKla51KVtuDwU7PElQCVNMpNcFZfQL2OzPbCWYllG6KW6WfTiX9trkerbnbZxC5mVRZgqitH4sGgJOI8Um0VJZsaJECIspF7oz.e1y479fb9mvulyDRGdY2.Kh6xnzSlsB5omvvQs67qID02DkrGmuvfhQRriUsRZwug; test_variant=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 17 Oct 2025 20:52:43 GMT\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nlast-modified: Mon, 13 Oct 2025 18:08:54 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ag4r8g%2B6UGonAdIz%2B1Iy00r4vaeM6B6BMyULVx%2B4iZEHIQpJKBopXdaXWnJN0qB9BRHMUS5ErlHY7R10ullL8pUmFALWZiEFffk50OBr\"}]}\r\ncontent-type: text/html\r\ncache-control: max-age=14400\r\npriority: u=4,i=?0\r\ncf-ray: 9902ae69b8c94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"fb6dba026e137c4646745b961339eaf4","sha1":"a7a9de2968d816d333b0a3561457d840b01517d5","sha256":"5e9fd5795547a5e089265e20274d5aee4615b5971aaf89e1cd227001c9e16ed4","sha512":"65f3b3da998215d26dbce65e95aecff5188578cbc5e462de65fcdc81e1ef4a72f8badecf84cc5129ac0a989446b6d4f3374084bb98974e042c577288bf60635b","ssdeep":"","tlshash":"0af0c06e5e030a77c453073477a13b00d8c19cc696bc263ca50b91cf50d2c78cb8d399","first_seen":"2024-01-03T23:15:05Z","last_seen":"2026-04-07T01:49:29.819039Z","times_seen":35,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Oct 2025 20:52:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1ebb17ac2a9cb3675636544a6ef4ea68\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":59,"dns":0,"connect":19,"send":0,"wait":28,"receive":18,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=d8d006a9-77f4-4c19-bfcf-1e212e5581d4\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=06444360220cd3121ea71b73847bab58\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=20","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=d8d006a9-77f4-4c19-bfcf-1e212e5581d4\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=06444360220cd3121ea71b73847bab58\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=20 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Oct 2025 20:52:44 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9d1d69fa1ca6fc283e230b4a8b66a028\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":300,"dns":14,"connect":92,"send":0,"wait":95,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/tortpb?id=7925137","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T20:52:40.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /tortpb?id=7925137 HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Oct 2025 20:52:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jXlk1AOLBlzU8g6gLFxbTZwO3LOmkBlt%2BdCLtp2B4o3WijwwLUtNy5%2F2Q3WjZnty2WwcJ4UKtuUvxyQSb7PELK%2B4qH4Kx0jNgDvI1Q%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9902ae5be868b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":988,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (919)","md5":"4e68d19cae7256f397069f4853c29717","sha1":"e8f53cd7e6aefbfb6cd6580f4f1364db57005db2","sha256":"dc7440e169ba0289e7e0bba31cb6c1272940a426b6ce0e948134bdcbff91734e","sha512":"fa71c08ce08c0f3bd70ee2509ae29c6210dd23fdb1bb47d00025e9a281c5da0e398197ce2983415df8bf8300e8a3eb852ab5e59bde9d24cf1377a10081a10e94","ssdeep":"","tlshash":"a1110eb93e159534d596814630bee7a93d3220207e029080c2acdc694928e83189fcbe","first_seen":"2025-10-17T20:53:05.293724Z","last_seen":"2025-10-17T20:53:05.293724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1500,"timings":{"blocked":600,"dns":57,"connect":1,"send":0,"wait":300,"receive":0,"ssl":538},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js?","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://magnetdl.homes/404.html","date":"2025-10-17T20:52:41.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js? HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ndate: Fri, 17 Oct 2025 20:52:41 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9902ae614f214c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10105,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10105), with no line terminators","md5":"acee6570e87b79436cf9c6a88826715b","sha1":"5f474b965d270ab01058707af767097a1ce43f51","sha256":"042261617b24b509504631411932c99f86518f7e55a940f86d9ca96a510ddc8e","sha512":"cb77c86d69e15fc24fcadba3bfe095562cd0065c57346d665f24fd49482ef86f059bd24d9f68a59fa3c6d4de9ac13f36eeba5891f9d3b81f2628c5974b0dbdef","ssdeep":"192:YHUWu3VDH0HkAe4alDAl8AOA6ALeAiPvwtkuftRNs/eceD:9lNAeV1AWZ7KDiINftcQ","tlshash":"9b22fb8bbe0db86c46b41ea1305739cbac158ebd603e5c498530d9f87d20e4a745ef9d","first_seen":"2025-10-10T13:01:46.657236Z","last_seen":"2025-10-22T12:56:59.717217Z","times_seen":720,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wickedsetup.com/06/44/43/06444360220cd3121ea71b73847bab58.js","fqdn":"wickedsetup.com","domain":"wickedsetup.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wickedsetup.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 22:48:14 GMT","end":"Sun, 21 Dec 2025 22:48:13 GMT"},"fingerprint":{"sha1":"91:63:BC:69:CF:9B:99:83:6C:00:91:FC:D8:AC:72:F6:43:59:9B:39","sha256":"8F:5D:40:1E:00:8D:4E:F8:39:48:0F:43:62:0A:71:B1:E8:FA:D2:22:D2:BC:99:5C:C3:0B:F9:75:4D:81:49:9B"}}},"request":{"raw":"GET /06/44/43/06444360220cd3121ea71b73847bab58.js HTTP/1.1\r\nHost: wickedsetup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Oct 2025 20:52:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38736\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: wickedsetup.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0e118560d791c3837889bbaf3763892f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108497,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a0d2e7811457f72f8dd2db354738e264","sha1":"f47cb6a242de0b1c3037bbf760065d147fbac323","sha256":"0c1dbdf797a30360fdb1e464aab7a527196feb6e3b0adf86f960051176e6a6b8","sha512":"2c9e0f0653f75ebac96003ee2ead0f6f6e2b1641ff895e46d73f03f3d04edf4224c7e5fec6e14cbcc766f9bca357274a0afeb2e4c5cc885854998c4a9c653c61","ssdeep":"1536:AIlvlV42zlFOJeH708AqNEiYNfNDIMugC:F42aEOqofNDID","tlshash":"ecb3d7483f80f1ac0267a073123fa55af1298e4e519cd25cf342e8f45dad796f93ab64","first_seen":"2025-10-17T20:53:05.299391Z","last_seen":"2025-10-17T20:53:05.299391Z","times_seen":1,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":111,"dns":55,"connect":17,"send":0,"wait":24,"receive":18,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:07:02 GMT","end":"Sat, 29 Nov 2025 00:07:01 GMT"},"fingerprint":{"sha1":"AD:4F:15:9E:60:62:A7:16:BA:4B:37:64:C6:01:6B:2B:99:47:89:BE","sha256":"44:74:EA:98:35:48:9C:28:63:20:61:17:18:F6:2B:0A:57:68:36:F4:EF:B0:67:1E:C0:7C:41:30:13:2C:02:F1"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 17 Oct 2025 20:52:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: de7dcf99dc759384d29cbabb4e78a730\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":60,"dns":0,"connect":17,"send":0,"wait":17,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.28.175.18","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://magnetdl.homes\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Oct 2025 20:52:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://magnetdl.homes\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=30e89815-e793-4630-8a39-481dd216a57f:3:1; expires=Mon, 15 Oct 2035 20:52:43 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"cd9f03c7e861fbe9fd1a204674584e2c","sha1":"089a727180b5e9026780e023b6c1ec03cf3bd4ce","sha256":"8eddce72c59e548656aa759e23e9448c8d33c93ced1eb0f9a513493a92e77141","sha512":"4e3d871f71215324ebb61ba15aa568787a9b77f47d7ad42233a61f9fdb7559452c07156a7546d30e87adbda130c140db9c4e0fbdc2a0b046f780f533da2225a4","ssdeep":"","tlshash":"42900404407041403d5c17054f4513c5300c4575d017d1007171c4c3c55111400c00d7","first_seen":"2025-10-17T20:53:05.302743Z","last_seen":"2025-10-17T20:53:05.302743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":136,"dns":35,"connect":21,"send":0,"wait":21,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.28.175.18","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://magnetdl.homes\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Oct 2025 20:52:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://magnetdl.homes\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=d8d006a9-77f4-4c19-bfcf-1e212e5581d4:2:1; expires=Mon, 15 Oct 2035 20:52:43 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"3a105888222d43ccdf15ac950bd481b0","sha1":"8e4a0f2ce223151300934b96501d38e04e68086b","sha256":"178b9f33b8c7166ebe85e3b35e7876b0208d5aefa18b1ae90b21547d83ee6dfb","sha512":"47f18c022373686819b826be5727f83f48a05fb1b92fdc78c01c9f6b54d13fb7f14b653c0308befd2f5e2138b35868ebd1b5076e7f1e5bee9fc0b4264c013403","ssdeep":"","tlshash":"119004d5510455474cccc431144c3cd7c5744c77c5c100140f504df11444174050413c","first_seen":"2025-10-17T20:53:05.306669Z","last_seen":"2025-10-17T20:53:05.306669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/favicon.ico","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/\r\nCookie: cf_clearance=NWIyYARX2eg57auVuaUS5.I_rm0BMhBk8yGmlFVE8PI-1760734361-1.2.1.1-ljQF8rap.H.9RJAWcn84DK6Gw4iegC8wBbeKa2idNuZh6iz8UTsBNN5LEbPTMuchWCH1dYriKla51KVtuDwU7PElQCVNMpNcFZfQL2OzPbCWYllG6KW6WfTiX9trkerbnbZxC5mVRZgqitH4sGgJOI8Um0VJZsaJECIspF7oz.e1y479fb9mvulyDRGdY2.Kh6xnzSlsB5omvvQs67qID02DkrGmuvfhQRriUsRZwug; test_variant=2; dom3ic8zudi28v8lr6fgphwffqoz0j6c=d8d006a9-77f4-4c19-bfcf-1e212e5581d4%3A2%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 20:52:43 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nlast-modified: Mon, 13 Oct 2025 18:08:57 GMT\r\ncontent-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=UiOdnTtFGRoxFe3BhjB8DLLYIwAcb605ZRDoYjyHmS0-1760734363.6111698-1.0.1.1-ETd25uV8aIxWQPOg3t8.GLKXpZMqhCOFFlZ.rDyzC5eLhjDLU_qeYme9x35Vrhad9FQtlfKHOl6ARixbOU62VnlzGKUgwS6Ajv6fGVmKm55atSGo5xezYBnobaxOhkW_sLZDobDx8DWf1ClGiSYO_k8IkpxEBonDXuYPp1YtTnk; report-to cf-csp-endpoint\r\ncontent-encoding: br\r\netag: W/\"47e-6410e2941fabd\"\r\ncontent-type: image/x-icon\r\nage: 2555\r\ncache-control: max-age=14400\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=UiOdnTtFGRoxFe3BhjB8DLLYIwAcb605ZRDoYjyHmS0-1760734363.6111698-1.0.1.1-ETd25uV8aIxWQPOg3t8.GLKXpZMqhCOFFlZ.rDyzC5eLhjDLU_qeYme9x35Vrhad9FQtlfKHOl6ARixbOU62VnlzGKUgwS6Ajv6fGVmKm55atSGo5xezYBnobaxOhkW_sLZDobDx8DWf1ClGiSYO_k8IkpxEBonDXuYPp1YtTnk\"}]}\r\ncf-ray: 9902ae6c99234c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"1a4ee84dab0e62ffaadc5285239a0d8f","sha1":"e7192fb7c5fed55243b15c27f6a8f9c9d8656ff4","sha256":"139af8f74c1aad1e8d86667cec17eed74746412d8cd3ab743694e37ce89a0634","sha512":"91d196641abcfb0d42d12b42d294f7951e2bb0ed7b3f7613e1caf61e911547171a3f301e9993f1b056c9e66a35ca42aa5c53569e8a49edfde253550705025d0b","ssdeep":"","tlshash":"f221936a2d47a7d8eb2d1e3568a2c7226132423791d3ed1b4e074ce1df12dd9440681a","first_seen":"2023-05-23T14:40:24Z","last_seen":"2026-05-22T22:37:39.069776Z","times_seen":212,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://magnetdl.homes/tortpb?id=7925137","date":"2025-10-17T20:52:41.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/404.html","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T20:52:41.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /404.html HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 20:52:41 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nlast-modified: Mon, 13 Oct 2025 18:08:54 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=II%2BuC4T37e3pnAslTiUyu7RLn2gJTGfcyLoN65dbzfkrUEiv1XMCpcb8zdVQwORxvu9cq6zw2%2F5HYhvwFwq3%2FkZgUvIjydMOvMk6MlAQ\"}]}\r\ncontent-type: text/html\r\ncf-ray: 9902ae5efeab4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1471,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (926)","md5":"d9dea1180d02f5cd597da6d28e71a130","sha1":"1f04c94cfad6f5210e1cc0bd774a565916b29d32","sha256":"707e164b3dde32dad9ac04e8354d25a360916c464f6b74064ce653a9bdcc91fc","sha512":"21b91ba4f649303471e672d68e4dc34508fbf374487e35cafc0abbdd87cc7d50a8e2243e79d01ed56cc5727a59b254a99d5c22d58bcd7f8a9e48827a0ffe6352","ssdeep":"","tlshash":"bb31747d3f070a36c9c2021632befb547d7160916a19a148d25fc88f48d0da648defae","first_seen":"2025-10-17T20:53:05.315681Z","last_seen":"2025-10-17T20:53:05.315681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/favicon.ico","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://magnetdl.homes/404.html","date":"2025-10-17T20:52:41.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/404.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 20:52:41 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nlast-modified: Mon, 13 Oct 2025 18:08:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"47e-6410e2941fabd\"\r\ncontent-type: image/x-icon\r\nage: 2553\r\ncache-control: max-age=14400\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJHCJs1z3f%2Barrhlp0cpS%2BupMiHpHEj1IKXlO8lGeXjAhooIvIAVap6S0yRb1%2FQrC9VqYRoaxRQo1aOhsByrMtZ1fSPSecNcp4cBuClg\"}]}\r\ncf-ray: 9902ae611f184c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"1a4ee84dab0e62ffaadc5285239a0d8f","sha1":"e7192fb7c5fed55243b15c27f6a8f9c9d8656ff4","sha256":"139af8f74c1aad1e8d86667cec17eed74746412d8cd3ab743694e37ce89a0634","sha512":"91d196641abcfb0d42d12b42d294f7951e2bb0ed7b3f7613e1caf61e911547171a3f301e9993f1b056c9e66a35ca42aa5c53569e8a49edfde253550705025d0b","ssdeep":"","tlshash":"f221936a2d47a7d8eb2d1e3568a2c7226132423791d3ed1b4e074ce1df12dd9440681a","first_seen":"2023-05-23T14:40:24Z","last_seen":"2026-05-22T22:37:39.069776Z","times_seen":212,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/cdn-cgi/challenge-platform/h/g/jsd/r/0.31093954321451195:1760099306:PYl1JJi_a61rqQmhSomRc7mzq5WI4fFR_laoGfpN5iA/9902ae5efeab4c11","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://magnetdl.homes/404.html","date":"2025-10-17T20:52:41.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.31093954321451195:1760099306:PYl1JJi_a61rqQmhSomRc7mzq5WI4fFR_laoGfpN5iA/9902ae5efeab4c11 HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12083\r\nOrigin: https://magnetdl.homes\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/404.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 17 Oct 2025 20:52:41 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=NWIyYARX2eg57auVuaUS5.I_rm0BMhBk8yGmlFVE8PI-1760734361-1.2.1.1-ljQF8rap.H.9RJAWcn84DK6Gw4iegC8wBbeKa2idNuZh6iz8UTsBNN5LEbPTMuchWCH1dYriKla51KVtuDwU7PElQCVNMpNcFZfQL2OzPbCWYllG6KW6WfTiX9trkerbnbZxC5mVRZgqitH4sGgJOI8Um0VJZsaJECIspF7oz.e1y479fb9mvulyDRGdY2.Kh6xnzSlsB5omvvQs67qID02DkrGmuvfhQRriUsRZwug; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=magnetdl.homes; Expires=Sat, 17 Oct 2026 20:52:41 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9902ae623f4d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-02T18:08:06.981696Z","times_seen":16047564,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magnetdl.homes/css/landing.css","fqdn":"magnetdl.homes","domain":"magnetdl.homes","tld":"homes"},"ip":{"addr":"104.21.12.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://magnetdl.homes/","date":"2025-10-17T20:52:43.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magnetdl.homes","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 00:50:43 GMT","end":"Sun, 14 Dec 2025 01:49:07 GMT"},"fingerprint":{"sha1":"C6:AC:8A:89:5C:E0:CF:04:A3:EC:57:E2:DB:97:B3:AE:29:1E:91:A2","sha256":"75:20:8E:2C:7F:39:6A:E1:27:A7:5C:29:A3:0B:C9:C4:49:F5:26:2A:44:52:E8:31:9D:06:85:10:F7:A5:95:AF"}}},"request":{"raw":"GET /css/landing.css HTTP/1.1\r\nHost: magnetdl.homes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://magnetdl.homes/\r\nCookie: cf_clearance=NWIyYARX2eg57auVuaUS5.I_rm0BMhBk8yGmlFVE8PI-1760734361-1.2.1.1-ljQF8rap.H.9RJAWcn84DK6Gw4iegC8wBbeKa2idNuZh6iz8UTsBNN5LEbPTMuchWCH1dYriKla51KVtuDwU7PElQCVNMpNcFZfQL2OzPbCWYllG6KW6WfTiX9trkerbnbZxC5mVRZgqitH4sGgJOI8Um0VJZsaJECIspF7oz.e1y479fb9mvulyDRGdY2.Kh6xnzSlsB5omvvQs67qID02DkrGmuvfhQRriUsRZwug\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 20:52:43 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nlast-modified: Mon, 13 Oct 2025 18:08:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\netag: W/\"217d-6410e26108bd6\"\r\ncontent-type: text/css\r\nage: 2555\r\ncache-control: max-age=14400\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCPzdH937uMFVOWi7aU%2BhRqBurd8odSZF%2BMlri3f1X8GR4MuO1hGvdctLXIxge3jlE9z%2BsWeuSCcCSRkeVsTKbhOhnBSgrf8oTSJyGpa\"}]}\r\ncf-ray: 9902ae6988c04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8573,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a551ba33f509e5ab95b735c8fbd06322","sha1":"3430984bc374eb72c1b2cd3f50b97c82dd81deb2","sha256":"32e00c600ca566e719805d261027a1be7ccf97654e90518f08570bdc1cc996da","sha512":"7de6f212b43ce4a0c7921fea166834b001966abecfa9cb1b02eea16b838bfac6a73e12bd44f9ddd8435761acd3f2a0a5b3fb17602ac11db65acec33bd30061f0","ssdeep":"96:rkszLe/CoSccR10sjxsM0CymQ+K0A2RHBqfxAM3/5gyOrZcMwbIfvtbgJjDOxAp:7fNobM7yUPMxAG5gtwbIKOq","tlshash":"790222a036f592c07696c872734967051338c03b8b6bcab9cdfa7059cea97445d737ac","first_seen":"2024-08-19T18:28:36.668061Z","last_seen":"2025-10-17T20:53:05.318848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"magnetdl.homes","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}