{"report_id":"78f5afea-c580-4ddf-9487-e318f6b2ab9d","version":6,"status":"done","tags":[],"date":"2026-01-04T20:19:44Z","url":{"schema":"http","addr":"cotige.com","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"104.21.85.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"title":"Just a moment...","dom":{"size":16071,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16071), with no line terminators","md5":"af06402fee7605184dad087f44974aaf","sha1":"d476a5767e5cf5da9613bd0eed2773eb30cd63e4","sha256":"6bd74dbf6d06fd789630fe7b8815299e82831eba34962f24c4e2fa09516c58fe","sha512":"71f3e6fbff0ba11eb48ab4d565a118c067473637b21299991369651e8466786ebb2bd11d3e1a8cc09074579e9df17a386a5ff9a9cb3c7b8e7378ac6ce3029711","ssdeep":"192:jNa+s9yIPl2boVmJkEqnR1B7MOVrTDcUCU2yJGXv:g+scq4brJkxnRR4UCUKf","tlshash":"bb723b379942101b72374fe77169f7548124f284e702a3aef1b39e58d7c9a1b15a23ec","dom_hash":"domhashd1b66b49cd478cb7e2f69a5795fc3707","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cotige.com","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"104.21.85.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T20:19:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-12-28T22:36:13.046248Z","alert_count":0,"request_count":4,"received_data":202626,"sent_data":1868,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cotige.com","ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":42,"request_count":21,"received_data":680333,"sent_data":10915,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"44bd38a3d7ed02154840350ad3b3bede","sha1":"bd8671acd7ef7f1f180cc22b76259b29163ffb08","sha256":"d6b76fab4e9f2db1361bab85608e7c54ee9114b80216a84385ab8d6e99de59d4","sha512":"ffd3dae9be82b32b33e16b84e9d7bde62932047469b4e6c4f8335a66dbda5b01194190596e513592da0dee8d83ec0a003bdf5f3c2fcf3995bcc8647edf5e555d","ssdeep":"3:N/BKL1X7j:eL1n","tlshash":"0e5504d0544070f01510cc11d15014155115c401501f4c45715d0cd41f300014410751","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.492923Z","last_seen":"2026-01-04T20:20:00.492923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da2a115b01e16269b0c71da1f4a02a65","sha1":"821d3e61a137c0dc9ae818319d1914f9070e94f8","sha256":"e3052d943eae75e86967ad011441eb36ff71b4d28fe85037f851b6a058819159","sha512":"3a2bce89753502d8af79699d873f0fe7882e795f529bf555fdb897f81bbecfe1f26c15e6b9653335068db3606b7b78e5e6af924ea79b7674879b8b089690dbf5","ssdeep":"3:N/BKL1X7vU:eL1A","tlshash":"a55504c0544070701510cc11d15014157315c400505f4c45715d44d51f300001110570","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.496348Z","last_seen":"2026-01-04T20:20:00.496348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"05ee7d1022929586971446f5d2db62f3","sha1":"564e31c726dbe87d88bc6e612f8c3dddc3f67d17","sha256":"9b65e45353813c307d309cd8cefea4baa954634c79d4508100b588a689d3c69c","sha512":"18857c0d871eb17217fbea63dac4950b83caf227a69c5ae82fa37cdb0cc512e53f0eab44d108afaf43202fbbb955df0f412d3fd0c7bea187be881d6828738c17","ssdeep":"","tlshash":"976118fbea2781518fef27928c73b704736310295816d49171b8d81cd96fd8bc26d0c9","size":3330,"data":"","first_seen":"2026-01-04T20:20:00.497902Z","last_seen":"2026-01-04T20:20:00.497902Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"55d93460c8dd7346731acaed27c2393e","sha1":"b5e4036ad23be241c88f49b75d8bbec51e3a787d","sha256":"db76f0bc53a6fe9450a3fce7fdb584700b43a7b6f66fb450f6dc1e459f7cbfd8","sha512":"1495a8bc1404bf0e0677fa9289b2cb2e5efe00b862b73abdb451aa416d47f146654aa2f7ba8e79999cf58d39f4f396940803407bcf1f52c8eecee1bd71101050","ssdeep":"3:N/BKL1Xy:eL1C","tlshash":"c95504c05d4074701c10cc10d370141551054455501f5c55715d04d41730000001055c","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.499929Z","last_seen":"2026-01-04T20:20:00.499929Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e364b2019bafd5be8075c202ce0b5aa8","sha1":"93a52e9e9367f6112dd9232f8bc4149033ab7a74","sha256":"ee76e13428aba918965d4323cae0b782993f080016b1a4f01c0ae9031586bebf","sha512":"8982e28f63c16f75e9c95271276691791fb6e49fe79fe2022c1e64148ad894cd15e3d3f4b3acca6a730b16cd25fe25a9807c9fdaf8390ee416c227a092e58a40","ssdeep":"3:N/BKL1XT7:eL1/","tlshash":"e65504c05c4070701410cd10d550541d51054d04d01f4c55715d0cd417300000010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.501671Z","last_seen":"2026-01-04T20:20:00.501671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"de4924523153ef8485cd73e3eeb04758","sha1":"c99d34a4517001cc2164e401f12c2de548117037","sha256":"4aafadf158ffc8194b5ced3cc0cbc20e05a817d0491057b50fcdc68504bdeaa3","sha512":"dd5c23c0a74eaae15600bfdc84344ccc899ffaf98742af535dd3267a6aa053a29b859ddfb38fae31d5d82d844a68c3040ebaed496eacdeb521d0bd493c04129a","ssdeep":"3:N/BKL1XBT:eL1V","tlshash":"055504c1544070701430cc10d1505c1551454c04501f4c55715f04d417300000030554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.503328Z","last_seen":"2026-01-04T20:20:00.503328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b10aad80c92a1bb26c45e142956fe3ad","sha1":"de55cd3dc48b7360540b5d6838c171643f9e83ff","sha256":"1d24ec21a037b4ef286e7e264e74c3837a4feeac1c51a92f2df629837e581c9c","sha512":"22b1cd5974c20c5841986a7420c4cfa241621c8852068afcf1b2ef2168815e5e6045a27d1350683733ca588a480550ccd196a314a5836e9474da85fff9618681","ssdeep":"3:N/BKL1XZBn:eL1rn","tlshash":"e95504c0544070701414cf10d150541d51154400501f4c55715d05d417300000410554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.507932Z","last_seen":"2026-01-04T20:20:00.507932Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-04-04T00:21:43.200939Z","times_seen":122900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b5ad17dd68625e1b1d0864b436e023e4","sha1":"de219222781130c1c7dc816fec8f30f228f44c53","sha256":"e6db10a58dd249b5fbc2c1b7391cb1197f65343e65b4cbc1c9079048b131d39d","sha512":"09a4fd6eaaae73f55fd387647c015e51535c0ef31b70dd6f956d0734779e32354918d558dd660a3ed79df5859c2b7e73b0cfd77446734751e5efd08a7b071ded","ssdeep":"3:N/BKL1X5Bc:eL1E","tlshash":"4a5504d4544070741410cc10d1d41415511dc400501f4c45715d04d41f300001010550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.514044Z","last_seen":"2026-01-04T20:20:00.514044Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ffd5dfeec4dbe6ae024d34c436b3f57e","sha1":"4b526ac5e3cd46ac564bd6d06d76b6140b689ac2","sha256":"eae04ee16ba48048428011e2b922f6298fddb72c8efdc1d4e059c12ab8099e31","sha512":"a9e4f41540737dcc6e4e6bf9c713d61c6377459263a0bcb871625ea8e1a80857713a2f5253e52f4d81d40745f30556e048a26cb53f28ca1d00e44438aa281568","ssdeep":"3:N/BKL1Xkbn:eL10bn","tlshash":"7f5504c0554470701410cc15d3d0541551054400501f4c55715d04d43f700004010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.5164Z","last_seen":"2026-01-04T20:20:00.5164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"34dd6d3cbd8db42d5f2554f61b4abe02","sha1":"e59c50b2eeb48662a8b2f3bcbe18de2a50713b65","sha256":"7248f2fea7b8dc18c43e78d196ebe4881ca4f0e0d8e77c59edef0f795c597a03","sha512":"6e1a08daf58821f5dd89a37e5f432e4b55917161b7c979325d76095843b1b43f01b60f7c788c6a2190d59e7f23774d10c358aa5fd794a28c32616488dbd8f43a","ssdeep":"3:N/BKL1X/Vn:eL1tn","tlshash":"3d5504d054c070711530dc51d170141553054410501f4c55715d4cd417300040110555","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.518623Z","last_seen":"2026-01-04T20:20:00.518623Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d7d6f0a1b811016567ad44eec585dd6f","sha1":"a4cbfe8535ed311c543fcdc787d12ce66c3e2e80","sha256":"99dc689b37474adff1c040cc67748e7fe7a637c7fce922c80d0a2c080388bfe7","sha512":"d0c9923837cd136caa805a2db17b30eac73bff01f5b2a52a45085968d86ae998dd37d0da5af9644d2534bbaaa4e8bb515535162d1ab9a4bd9cd70b9caa03a503","ssdeep":"3:N/BKL1XZV:eL17","tlshash":"115504c0544071701410cd30d154141551054410f01f4c55f1dd04d41f300000014554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.520634Z","last_seen":"2026-01-04T20:20:00.520634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"89cf9de0ffaef609a3807d7f62f81ff8","sha1":"eebbbd6227bfeda1182b735d6366100693d8d417","sha256":"e85017c10a46acee4982b002f36ead780560e221ca97e241ff6a47d608982891","sha512":"56155c6371fc59812d70ded9be38e4c8bbf1a2d6d02ffd07b56c6d1c92e4f94a976e845e6db400e1ff8816a60e2469d8e89f7d342a8df1f41dc0022cb890e583","ssdeep":"3:N/BKL1XZY:eL1S","tlshash":"785504c05f4074711410cc10d150141551054c11501f4c4d715d14f417710000010550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.522787Z","last_seen":"2026-01-04T20:20:00.522787Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/?__cf_chl_rt_tk=CTU_BTOunyYqxnbaB78gyQng0zhFioJyusE1An6kVzE-1767557961-1.0.1.1-ZmTuXAkloatfeNP1MZvLnrr3f0CzTFmTeQwb7PuExpU","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T00:31:23.380315Z","times_seen":665367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"42de4b56923b5442df14a06f76afb7d1","sha1":"12a0a92536179c6a6c7d0882d3fdf17bbe678961","sha256":"5322d4456e9305a19db96e641619d3f6635f16c5d56d956cdc41a2268848bb46","sha512":"715b29ccf1152f515cf5ac11191bf5593288fd01cf0ef7d4554ef46ceaa2c98e5162e73480d04f06af1df1997bc8306a973be465f443e0f99bf8239281ae3c0c","ssdeep":"3:N/BKL1XpJ:eL1z","tlshash":"595504c0544070f01c14cc50d151141555054400501f4c55715d14d477700101010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.537493Z","last_seen":"2026-01-04T20:20:00.537493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5ab1031fc7abd12099c3f1f6b942c927","sha1":"4bfc27a8094d94dbe6b1d8d57c5fa00e0fb7de0b","sha256":"80eb6f8232cf4b90087d17aea2b0b675374a6343d582766e0f475fde66d7aff4","sha512":"534f7351485c878ba8e6089da706a84118fcda19de2f3024b74a7aa57601c5fcb05b7b48cafc095b3a1064dad8e870aac77894d0d46e7ae764ced0d0cdd8ef75","ssdeep":"3:N/BKL1Xe:eL1u","tlshash":"8d5504d4544070741c10cc10d1501415511f4c00501f4c55717d04d517300000010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.540528Z","last_seen":"2026-01-04T20:20:00.540528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"01475a465fc78989aabb67710a1bade9","sha1":"07a442254696301cc3a348d891944d4b92badbec","sha256":"da0a123920dbc4ed9994cc4bc3df10d66b70909568d132d7a56027b48b0e2cd5","sha512":"68120308cf02fb53b0730b9c117118dd92f7f004863e7b3e4035ce740caf5504df40069f0e2c59b9ac8ad187fdb5f09c70665f0d91b32e123ef28a82f119f412","ssdeep":"3:N/BKL1XaA:eL1qA","tlshash":"1f5504c0554074701430cc10d1505c1d53074410501f4c5d715d0cd417300500010570","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.541878Z","last_seen":"2026-01-04T20:20:00.541878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d4063f03c67afb80db48bd44a43a22e8","sha1":"6d72a2562d13e5caa53f7a36b46de78066889e0a","sha256":"18f5464623a49420dc6ed742fa98dd020f9620a2c0c3916efb92309a69bfe6e1","sha512":"e5b5d7d548fb38e1d519580e6de8e867982dd631d6df41511810ccd63d749f75a08ef4f4cf31482cf80ad1a62d30be6345c900a9feb5ad6adbe0922b59e4d14f","ssdeep":"3:N/BKL1XbXT:eL1f","tlshash":"9d5504c05440f4701430cc30d150141551054410501f4d4d715d04dc17300000010550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.543149Z","last_seen":"2026-01-04T20:20:00.543149Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e0bd8f95a0f","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"034229602f26d4f20b72a908b468bba9","sha1":"489998019a1bc050e41ed2b9014cc7730b05a410","sha256":"e68b4b03c7768cf16688f2e1d89e01271f575488202e7c7a64510dc0bae05459","sha512":"46808122f35fbb0fc1cb40e6ee0086fb6990607104cbf75dc54571d70c269aeae92b7ee7b3710cb01a8e640bfc5b1bc01a0f408d894840533ec9cfade575f54c","ssdeep":"3072:i56AKThXFd2YP3ma62hKMa47rhk+XRvY9Dr/caCamar3lx34Jn:c6JkIRvYhf0","tlshash":"e0c3d6cc29da7552036f6475682735caa6a6bc8c312c4d1cf611e6e0bcf871972e2dec","size":123414,"data":"","first_seen":"2026-01-04T20:20:00.491208Z","last_seen":"2026-01-04T20:20:00.491208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bff6661c9be99cd1590dc028a75def8b","sha1":"2e7ee9bf1b0a7230fa14bdf96cd0c3c3b55628b7","sha256":"0524cc07f4e210b0524b4211890bddbceb7dca599ab437e3d0391df602c701d1","sha512":"0401261aed6eacd535090472536ebda497ec62eb354f84d0b227e93b94f5b69714783c19a2a0a59ef8fa6517a728e038e3c80ef9e1c81dcf7927daa27a59faab","ssdeep":"3:N/BKL1X5XV:eL1r","tlshash":"b65504c4544070741410cc10d1d014155105c400501f4c45717d04d417300001010550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.544257Z","last_seen":"2026-01-04T20:20:00.544257Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"20ac8dbd78ebf5a656725931dad71b26","sha1":"f575596b9712dc99abb033059ed7c9c6d928da0b","sha256":"910584b2f96b5c776057a847e3dd007e3a18893188ae56855c25836d200a32bd","sha512":"35f07349a0f4db6534281a7b53758641fb00827e325023f7412825654f14b27a325a3ae5ae63476698fe510e1281b0db5845c6039a7ed7b3572c9ab43092c8ba","ssdeep":"3:N/BKL1XGP:eL1WP","tlshash":"9b5504d05440f0701410cc10d150151d51055401501f5c55715d04d41f310004030554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.545557Z","last_seen":"2026-01-04T20:20:00.545557Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ece4d968c264ba0e1c30815caaea8301","sha1":"09edf6f7834219f3ac3bc8d45eba660f2303383f","sha256":"0416a84c701d8918c85bdacc422079507eaf6b070dc3a9aa6ab2a1f1ac0d3ac5","sha512":"68b099f122e346c8b6b5db7d3761d6ab00d8c2d8cdc1a5b8eeb92cad67e2ba1ece30cc861afa0b3a6cd568ed8fffc15d7fb2630a125fb680c935c8d5a25447ee","ssdeep":"3:N/BKL1XY6U:eL1o6U","tlshash":"2b5504c0d44074701410cc14d1505c5553054410711f4c4d715d04d517300000014550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.546959Z","last_seen":"2026-01-04T20:20:00.546959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b716c13903f6fab01c2c90d145d40f31","sha1":"c1eefdcf946fce5af902baad4b097af6d998035a","sha256":"d8ea2cb948c82927bd1055a227462c9679b1545bc29788986f37cb334dcdb892","sha512":"022ff2b815d9ae4731d6f038543fbe3a2ac9abf98454d3128ffe914023a4242504adb48f54d8efe7151ef15a0cf111543259d4a77a66302c7a2153b10bc5e6e8","ssdeep":"3:N/BKL1XK:eL1a","tlshash":"fd5504c45d4471751d10cc10d150141551054401541f4cd5715d04d417300000010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.548422Z","last_seen":"2026-01-04T20:20:00.548422Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6dfafb15b4fa","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d61e2c37e3882da281fe5dcab480e96","sha1":"1f179968c6781c1459e274a06262e55ce5dd5a9f","sha256":"7f4347ecd1ad1b4a3dffc61ab1e0915865e2347d3d326a6bd1b711d1b9fe9f04","sha512":"62055dcf3b643371ec4fb74c9c282971d91ebb0ffeb4f525fc17ca8a7d33e5732c6c0e9dca128fbbfa315605ae23c1d466e33227d3be4626b24cf82db280b389","ssdeep":"3072:iROc2Nyauz2sVY7XIikPdTr2GOa3h7z3Em3+9gzy14c2ac:p9NyauCzXIikPd/2+x+40c","tlshash":"b1c3b4cc64deb56503aa2524542b35cb62babc8c71285c2df912e4d5fce870871b7eec","size":119840,"data":"","first_seen":"2026-01-04T20:20:00.479912Z","last_seen":"2026-01-04T20:20:00.479912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6743f74db6eda8c562e2c18ff1579808","sha1":"c498c36d5b7ecb8d57d4ea99e91a9485a772e291","sha256":"68b2b335cdaecb24ec0a9ff719821efa155233ff7710868adec5f5c214bd51ce","sha512":"0b69fbcba7c1c21fc411fa01ca0034708f80e9201c8968100a156a5a5e5a864647e580933e662756e4e3f7373ecbc815f4fd24db4551ecc05024bb41607251f4","ssdeep":"3:N/BKL1X4Tt:eL1IJ","tlshash":"f75504d05454f0701510cc10d15014155305c414505fcc7571dd04d417700000010550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.550403Z","last_seen":"2026-01-04T20:20:00.550403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c7c2d71999ab7d5a81f4f5d97db6c40a","sha1":"f190a94b95b75e1b618048652649c165e9c2da7d","sha256":"10c48e31e9f00398ecf43f09c3189acbdd7b3bac2b397a5a87668e35ce8b06f2","sha512":"e3a139d62e6f2d57a761d381f39d38abf1026be02f0f1a72f208c71d4dcd5cdbc818269ccca89934bc7090772ce7774fae409d521857772791ab055a19aec57f","ssdeep":"3:N/BKL1XES:eL1US","tlshash":"ea5504c0544070701410cc10d150541551054400701f4c55715d04dc17300000010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.551894Z","last_seen":"2026-01-04T20:20:00.551894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"16804f84b5a3297f3cbd785b19da8ad4","sha1":"32ed7119488341eeb7374d2c8404fe6eacdfb31c","sha256":"5fc905fb6095e8f791690186a56da7c9d3d435288ec7e977f8fa62d07a800b23","sha512":"c747a22c3471695b3a7fdf24eaa1e3f0fc2dce35ce061c08a61e0d4a07f737a4ec36babff744d9b546575f16ed6b732556c1891f7cb050286f7f5c0c3d228b66","ssdeep":"3:N/BKL1XDdn:eL1R","tlshash":"4d5504c074c070f01414cc10d150141551054400d01f4c55f15d04d417310000010d54","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.554836Z","last_seen":"2026-01-04T20:20:00.554836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"252cb7ca7941ba0853e2b3a0b2d4491e","sha1":"8e0b68e5c4ad6391694b9168ed5e600c9cf44c76","sha256":"fed03fc33e308a01db85cc56bde6cc49650c3ce91490c1a41412c28f6949aad8","sha512":"4f7b6b3f4e4fba7d36224a91efcd60bb63479a7848cc363e32307f40495408dc39dcd559cd8d2428351da2b1c9d51070208f3f60faef672fe0458df66158689a","ssdeep":"3:N/BKL1Xy:eL1C","tlshash":"6b5504c4544070741410cc10d150141551054400501f4c57f15f04d517300000010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.556861Z","last_seen":"2026-01-04T20:20:00.556861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/?__cf_chl_rt_tk=kZbX3QWsal62gNQwd2rQxdR.QymbjjBnMBbmrlc8hqA-1767557953-1.0.1.1-3jezryyvbyLAdmSXz0qaJfh5MXoLqseRsWCNdutwTS8","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T00:31:23.380315Z","times_seen":665367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/?__cf_chl_rt_tk=_jc5t3kF1Xgxk3f0cNMIoWRICApQx6yV8Aq1TilvR0k-1767557956-1.0.1.1-og6TREzjD280SxNlgr3BwTGRLmd2lU0YzLAoWoYWtBc","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T00:31:23.380315Z","times_seen":665367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ae516c7f9f8a0d1a3b7a2ca67f34afe3","sha1":"90732f81df6bb1dece4c56010b2d8934a0a13fbb","sha256":"75f0eff08b5f2b2cc45a966a37b6e65989ebc7d89340715c99317c3f50c6b817","sha512":"0b6a1ea8b5592d596b615fb69b12dadb050aa94b948d43b071b216a013ae539a71042bc03f9d793c547d72b8d26af3bc6b0e5293915058a7b4a0748eb40297b8","ssdeep":"3:N/BKL1XhUV:eL1m","tlshash":"7f5504d054c070705410dc54d1d0541553054410501f4c5d715d04d417304000114554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.558697Z","last_seen":"2026-01-04T20:20:00.558697Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"15a4d13445f6065ccbcd1a751a41a5b0","sha1":"a31025b67d7ea016185bfcfd85a574d2609892f9","sha256":"b5bcd7be587df97a128a0128ae2b4a51709c05209661399da0aaad694df8a70f","sha512":"b23f32057bd7ebbb66f68ed08c45057d6cc1db5ef50b77b6425d6cfc289be09b39cf1593e656a43ecce5af0fe1ccf9c9e43fa5085841139d8f2828a236bdc096","ssdeep":"3:N/BKL1Xw:eL1A","tlshash":"e65504c05440f0701510cc11d354151551054400501f4c55735d04d43f300000010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.560259Z","last_seen":"2026-01-04T20:20:00.560259Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c4121f2f97b90ce465ea3cd584a7d817","sha1":"add8d8f09ec061fb3f173a392c20c3c22d6ed81f","sha256":"a35170da889c9618d274d8e22365b59f23d8b7fc66c7538823311103f168a307","sha512":"0e8eab394b90fc7ca9b05618f8643b2434b7239f2ba056611568e6e93b6e65e21063cf4f4cd0ed5007fce385b10c78a367b106289973086c9f5299dd64b657b1","ssdeep":"3:N/BKL1XKR:eL1aR","tlshash":"5f5504c05440f1711410cc10f150dc1551054400501f4c55715d04f417300000010554","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.562742Z","last_seen":"2026-01-04T20:20:00.562742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e5c8d5b5a0f","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6a9b9f414492189c5a32975cd6fa376","sha1":"cbd80a1800c39d80c407befdd6051ff0df8b5401","sha256":"c113ba7663e6e6060fa853d1f82913b471e468da0daed59f92ffb8d5d3e2dabc","sha512":"9ed12a20fa897a43a8a98225f5f746e97ee8ae4d2b9c45e577daf7e8a798cba917c6819829a86a94cbcbb3d248107e77de7209280d8f5b47012876dff799e7e3","ssdeep":"3072:ivBxg3Rn62rOOCrXVDRSkWLE/Hq7o1N8+Rj:0gOzVDQkWLGqs1L","tlshash":"3ec3b6cc24da7461036a3560182b36ca65b9b88c712c5d2df542e5e5fcf8b58b1b2efc","size":125244,"data":"","first_seen":"2026-01-04T20:20:00.487893Z","last_seen":"2026-01-04T20:20:00.487893Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"13b87f68265cd50098f16cae5975c34a","sha1":"bb9cecdec5c8f0555c99f8132c6d09d7ba79c874","sha256":"949f649bdceea17e78fad0333249812fd85586f5f44190cf3f4abbd0290f6490","sha512":"ba679c5d60012c08b050ffe5d908c4257214156df1e71c50fbe2c7ba25687e836923b1d7fc5a1e07c7843d8426ee6f3748cb6fe33e69c3eec49799cf48ef0839","ssdeep":"3:N/BKL1XZm:eL14","tlshash":"315504d05d4174715c10cc10d151141551054c10505f4c4d715d34d537300004010550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.565063Z","last_seen":"2026-01-04T20:20:00.565063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b056c690a8eb1bfafc075df217d4401c","sha1":"c2a3c83d4effd8654eb498b2facf5e5c8f5e4b2f","sha256":"152f74e7e84f2596aa376236acae028fc113f77d8e8920678d1b962ddc89f32e","sha512":"65fae3aec0f5eab9a065767fecc65f5673013387d53b80778679a50e52cedba53caa6c6c517be4a8a01259899026f156b423e2a5663b8b184006b2288a8f0b6a","ssdeep":"3:N/BKL1X6Tk:eL1KA","tlshash":"c15504c0545470701d50cc10d15034155105c400501f4c55735d04d437304000010550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.567462Z","last_seen":"2026-01-04T20:20:00.567462Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6f14989a5bdcf0e58afe4840a3eca3f4","sha1":"7e296c3a5731ca6f5c02691c0fb033b3e32815a3","sha256":"ae87a472b5d71862dd86da69a91e6b83f222b84af61b3790fa7cb0d2344f52a4","sha512":"a32ff88036586dfce881c13b35cfe225cd08c13726f4e3e4f73e6c1e77b6caeb4713bc9eccf001398703fb03507c301b1dcf7528d29f4070330d2c152750fad4","ssdeep":"3:N/BKL1X2WC:eL1GWC","tlshash":"d85500c0a880b0b02820cc20e2a0ac2ab20ac800a02f8c8ab2ae08f82b302000020ba0","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.568649Z","last_seen":"2026-01-04T20:20:00.568649Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"655286950cee2ef6978c139ff96902cc","sha1":"a6e29cbd52d49d1602ae127792f0ac5802edf184","sha256":"f7cc1a98e1f78a7b9afebe0d5a8a35362383f906c92192ce3a574e866540e3d9","sha512":"94bc54a9ff729015c0ac5b08fb57eb7295444c7bcba92bf07cdb96dca897551369c812480ffba719baa6709bd3cae4c39eb15c28b0d113e858f965d2135abacd","ssdeep":"3:N/BKL1XBTQn:eL11Q","tlshash":"2e5504d05444f0705410cc10f3511415d3054400501f4c55715d0cd417710000010555","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.5698Z","last_seen":"2026-01-04T20:20:00.5698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/?__cf_chl_rt_tk=2LFM.y.9qt9OEav65D.zEnONKlDypMAq_M_NmAoH1do-1767557969-1.0.1.1-RQGOU5xfSWNzF5hNBbUrdk6UGhWNdERRfq9TLRqBRbk","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T00:31:23.380315Z","times_seen":665367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b982a61ea66e13b0c1548087585f44a9","sha1":"4d78cd89612982be4cf71b4b441fb5fc71a261e6","sha256":"e6a8dd2f9f12171f926df17a733404276be0bdd391b84018dd88b62d81ab4174","sha512":"6524c0e2159bc7fcbb0eb4e6199c6ce282f8600e383634df05693bdf3a1121ab55386c8fcd5e81c4de612e36b7b9866bfcbf5ca77c56af09f74fa05e139a30ba","ssdeep":"3:N/BKL1X2c8:eL1Gc8","tlshash":"735504c0554070f01410cc10d1705c175105c400501f4c45715d04d417300010011750","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.571021Z","last_seen":"2026-01-04T20:20:00.571021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"60d3b1d7e676472e790e97d760a684f5","sha1":"030ad84c4fdaeff6cdc4a78aa2d14b7fc1fa4126","sha256":"6d67deb66a76b619881adf6be759d98fff72249e87a1f696a61a107f27ff8956","sha512":"23a7bc26cafc9893ad6ff282026e2c1f4e778adf9566bbdc30278c733f0bb0568d7b591a1f47b704db7dc2b97c84d55cd22cdb74afa41c43cc6fa54cc58d32ef","ssdeep":"3:N/BKL1X31:eL1V","tlshash":"ca5504d0544071703410cc50d1d414355105c400701fcc47715d04d457300004010d50","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.572184Z","last_seen":"2026-01-04T20:20:00.572184Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e284fd2712a","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"907c86568adc6a2138db2422d6078a87","sha1":"e8349229e2711228d289b03e0f0c987e9be5358d","sha256":"4ca66a00e8c81e62adeba2bc7bd0d6235ea0bd696a02bf8adcad8bbdf5973f10","sha512":"a8cd884b34bda3e7526edf3fdd4a9fcb68f8ef0498ab5daa2997f257523aa761b7b223fc618577e14b8bb01def687d4cd1f92231f19851681e702597e09d5957","ssdeep":"3072:iA2G0G7qTWm6RKWscIKaxDuZu6EkSYYDuRJ7ZQAkYBQPYbzMw/j91ZM3B2:/2GpuxCEkSYYDVA","tlshash":"42c3c5cd38deb561036b2460502731ca627ab88c31281d1df952a5e5fce872976a7ffc","size":123007,"data":"","first_seen":"2026-01-04T20:20:00.486078Z","last_seen":"2026-01-04T20:20:00.486078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef31ceab7b657ac1e7b5063329841ebb","sha1":"01082b2753280bdbc2a2476ecefbe8c22288d093","sha256":"b830548f46ba5b00f26634c9408d4c6ca471dfa8ff0816a5ae978f828b2240b9","sha512":"d4fc26911e1251598bf717c71f20cc6c84add9ea25a4fc65d62c9c58cc26cd81c4dbf3eb64c261b8b72ddd5d971bba7f21225e65db2a0200cfc635a968f39505","ssdeep":"3:N/BKL1XYZXn:eL1opn","tlshash":"aa5504c07c4475701410cc14d17054555115c410501f4c5d715d04d41f300000110550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.573172Z","last_seen":"2026-01-04T20:20:00.573172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"810c3c2fac232f58c081f8ec209300ba","sha1":"028ab74300fc3d3e5fb638154de6859f822197fa","sha256":"f4a9b1f8ca783a7b33759cfa5e339b81e0a75e584537be1be11d64dd08f2eb82","sha512":"10cb4ada6cdaf094f0b944ab4cc72afe03a97ba7a3d0387df94c60b81c9fdcfbe9be115fd94f0efa5f7c1df44596a555532fce34188aec501f06c289eb94c934","ssdeep":"3:N/BKL1Xa1n:eL1q1n","tlshash":"1d5504c0554074701414cc11d150541d53054410501f4c4d735d04d417300040110550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.574331Z","last_seen":"2026-01-04T20:20:00.574331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c4cea1ebd608880e8515c24cb6a33138","sha1":"c1eedfa717565c37aec5e60d0d9ebbf890879494","sha256":"365f0591a9ba483a86452baeaad0c109d25f6e92af9060b695d5bd9b9a24b97e","sha512":"4ab4bdf6cfa0d60d4ad6fa414fdbb83aceefdf3c15fe5185ccb72336b5a60438317315823f8872f91d536e4d5344ff2be6b010811556f45ed94b8e6a5b17c497","ssdeep":"3:N/BKL1XbkSn:eL1oSn","tlshash":"235504c05440f5f01410cc10d150151551054410701f4c4d715d04d417301040010550","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.57548Z","last_seen":"2026-01-04T20:20:00.57548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d60f432fe6718f5a4aed6416fd07a71","sha1":"3586524a8c9c61c125ccb71882f02b4629ec03ba","sha256":"a4db73d5d28eaf95a6f10f9be7bb5b369516e4c61f1f4f128863553d4cda2c25","sha512":"20fd163703138ef218b26e0ebd8f075a75efc48e5469b4804036961304b4c71cdb7aa4b7d34e03199449816c31d012f6db331aa1048f02419d0ccf3e4b20881a","ssdeep":"3:N/BKL1X6Ua:eL1KUa","tlshash":"185504c0544070701450cd10d15014175505c500501f4c45755d04d437340000010d50","size":1337359,"data":"","first_seen":"2026-01-04T20:20:00.576601Z","last_seen":"2026-01-04T20:20:00.576601Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"cotige.com/favicon.ico","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:16.599Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/?__cf_chl_rt_tk=_jc5t3kF1Xgxk3f0cNMIoWRICApQx6yV8Aq1TilvR0k-1767557956-1.0.1.1-og6TREzjD280SxNlgr3BwTGRLmd2lU0YzLAoWoYWtBc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:16 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5094\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: \"423e-558944dd8a100-gzip\"\r\nCache-Control: max-age=864000, public, must-revalidate, no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: Tue, 03 Feb 2026 20:19:16 GMT, 0\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nAccept-Ranges: bytes\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUgnWKkyyUCZKPeXYsgXOyDz0Y9wIoAJBtDyQsUdZnT7AR8fhGOCRMEHhS0JpTlScgsy1Fw46ZVUTXJKtZ5bJLjjqYfvowUn\"}]}\r\nCF-RAY: 9b8d6e0cbc11712a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"262a60c4e5d2c619741ae58021e40a4a","sha1":"6602fe0b0c8fc677ddfaaaacc2a7e5c154852932","sha256":"1784592cb496692c6ad36e98821ca542bbacb79c76bb4270f008fb4e5bcb3652","sha512":"f836c38eea9373534a557ba758b7df2dac043b7c3ef220e8308758a98478c9111f16147c09639618fe2b5b27f7973c5e7b13a42e6b5d26481297f81acf42dfbd","ssdeep":"192:JR+rlAhg6hRCS1Bvj18Hbjg5iMmhKC7sHuUykRR4:JAWh5Gs2HbU5iMmEPHu7kRO","tlshash":"51724b72bb1ff159e6d912305820e39b57146c3898ea1712ff09fb442d72397ae4e085","first_seen":"2025-07-07T11:22:33.39518Z","last_seen":"2026-03-28T03:41:57.254174Z","times_seen":106,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/favicon.ico","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:16.647Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:17 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5094\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: \"423e-558944dd8a100-gzip\"\r\nCache-Control: max-age=864000, public, must-revalidate, no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: Tue, 03 Feb 2026 20:19:16 GMT, 0\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nAccept-Ranges: bytes\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBF9XQsZIR2WxTZqUUy4UrB4Wc479esauUk%2Fuu25cm7Lbp6%2Bp%2BCULZVkH8VAO2lj4Lqz8%2FTMBRfQue9ePn%2Bo726kpbsUJnDKXM8%3D\"}]}\r\nCF-RAY: 9b8d6e0d0cab5a0f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"262a60c4e5d2c619741ae58021e40a4a","sha1":"6602fe0b0c8fc677ddfaaaacc2a7e5c154852932","sha256":"1784592cb496692c6ad36e98821ca542bbacb79c76bb4270f008fb4e5bcb3652","sha512":"f836c38eea9373534a557ba758b7df2dac043b7c3ef220e8308758a98478c9111f16147c09639618fe2b5b27f7973c5e7b13a42e6b5d26481297f81acf42dfbd","ssdeep":"192:JR+rlAhg6hRCS1Bvj18Hbjg5iMmhKC7sHuUykRR4:JAWh5Gs2HbU5iMmEPHu7kRO","tlshash":"51724b72bb1ff159e6d912305820e39b57146c3898ea1712ff09fb442d72397ae4e085","first_seen":"2025-07-07T11:22:33.39518Z","last_seen":"2026-03-28T03:41:57.254174Z","times_seen":106,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":443,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:16.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://cotige.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 20:19:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=s4.qdKwY2FX5c8ozz.DeJ449Rn8T0k8hGnLriP8lX_0-1767557956684-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b8d6e0d3ebeb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T20:19:21.008Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 04 Jan 2026 20:19:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=93cXYVAOqh9RhJnO40vugVRHrNB%2BBuyVDV6krh31Y%2BrDsNqunT9W14Y7USXGprmPH8Pejyuc%2FXBMj97w4rQ9QdZoM6adcgg%2F8TS4uXml2EANyZqIT0936G6LeElO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b8d6e284fd2712a-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b8d6e284fd2712a\", cfL4;desc=\"?proto=TCP\u0026rtt=6196\u0026min_rtt=434\u0026rtt_var=10477\u0026sent=54\u0026recv=33\u0026lost=0\u0026retrans=0\u0026sent_bytes=62930\u0026recv_bytes=4569\u0026delivery_rate=26077038\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5332), with no line terminators","md5":"d6d9b941da447361d6f8213332f29b63","sha1":"9a482058aae082f29bc94bcfca32297534572d90","sha256":"2a6a21439810a9487e7ed5737efde2e8306c6dc2aebd52f4d87b3ce4d7776542","sha512":"178429f2435a366fad59bc5966c07ad2996d0a6f9cfbbf0fa3d5557b74ea56c3c5ab1baab43ee48c66be63b215c57b415cc666129dc04dcf0612a22d366be9c4","ssdeep":"96:PNybXZtIEb0EFW87IMa+N5+yypzsTnchxKRsQ0g2gLtL7t3rPH70bYzueh8O+Emw:PNadB/ai5NIzmc2mQ0g2at7/700ywow","tlshash":"05b12bfbea12901697bf1bf24877b304a312a114a702c495f5f4d85cc6ded4b826a198","first_seen":"2026-01-04T20:20:00.473709Z","last_seen":"2026-01-04T20:20:00.473709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1972468873:1767554674:nZcgwAEw2TNRUeCf43LN-mp802aDrncQg2c18H1cERs/9b8d6e5c8d5b5a0f/fmj8lO6bMo.MhE1DNkmMKV6VxrR0F3GRwFMLidWHgW8-1767557969-1.2.1.1-pu8pjeoqvl.pXbzsbiQyhT97vjNTCyKmUNgCSC1GxO875TVeIegOqNQuMdvg23Oz","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:29.704Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1972468873:1767554674:nZcgwAEw2TNRUeCf43LN-mp802aDrncQg2c18H1cERs/9b8d6e5c8d5b5a0f/fmj8lO6bMo.MhE1DNkmMKV6VxrR0F3GRwFMLidWHgW8-1767557969-1.2.1.1-pu8pjeoqvl.pXbzsbiQyhT97vjNTCyKmUNgCSC1GxO875TVeIegOqNQuMdvg23Oz HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/\r\ncf-chl: fmj8lO6bMo.MhE1DNkmMKV6VxrR0F3GRwFMLidWHgW8-1767557969-1.2.1.1-pu8pjeoqvl.pXbzsbiQyhT97vjNTCyKmUNgCSC1GxO875TVeIegOqNQuMdvg23Oz\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1964\r\nOrigin: http://cotige.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1964,"data":"8frO4UY$REYNvE$z-wxba9MwFzPZhwnd4xQdef6zvVe0Cp7DS3cIeA3cLUmsBsyvQ8gvqtk7vJtSFAM5+0XFxRCOmfzVPGLVjWsXzcjFSiWOam7UfMYjwnaxC6KqVf0Uf3q9ONNa8PSPI7L3ebl0TfVo1wwZ5JRVKGYxA2t55GgZgv-CKkOWOhctE729MCcNlUBtQX+8CsIS+fnZiNw3DNS3lI$TGfYvN-4PJrTP7sjXIPJ9V5hK4WmxjXeJ5TCKsnLpd1KVrRatJvrsgIorroMBhw2DNRqPl$NDubyf+2BW$eGpyPeCOyUKicbX+Jiau4yMo0WMGngnoVtvjT0llmQyPzZrRSJJfiDjUXMm2cimThAePFrBifhli-FYAqsu8dcl5e16AgkwMmcGw1TJds9gU57FckR49-A2lnm4P1n5pXgoM-bEjQtquDsjtD++vksYdij0zK-3kkemZtGPUi0T+Q324RbcoDp$RtwuDutKV$2qowmWpbvDzB4j4hrIICUEKOUptOjhl801vIsAhNOZzKo$rZ3lKLUm+$bcyGZLR7sypdwJocWo8shhj$fut$uWCnu+QF22Njka3od5h9fucOUiA3yErDEzoZovjtPOBFfO1VhRIBQFGC8eashrzdyZymJfeRGCLbO83mdk6z3MsBlbN-O69BavGZ5eUX1BCcQOVJKNA2LMLXiIA8Y+XuWaAYiRT$pQeskX5buCe-p8T+GcQlnMcL$RkBc2ZDex3jtZs0RFJ7vOxmJkQ6O-16SNGm4u+B8AhdCU9n301k9rWzQcXG-nvzDsqIunS$O0GElbMBw804YUnEi$w3w6R5Sz5+54NjpqpuC3+BzQLRPvCcPWoottPZuuPiubqySKFpcbzyf4cob3EzWM2wlbC-x0YUKUABih1oy5kAcI5GxITVy9WA1GNIeVJvQmLacRAoRgsCT3EA-KsxAgj$kl0ys9caJB9h+DvpyFkRcWQplJWl-+PbfMeu3BVl+Kta1i$hISi$wNbRXtw8d0LPUdE7G5jMm8g3ri$IlInUFbM$7mifZ8FdY-hfNwKo3$cpJiVwmspboENt1ndnK70UuQNdQ12I1b3jTScZ101Mnj9I1oTKRmDpOkXKJ+Ae0XvjNjYNuvfX81UnIfVcD5LmztjwKXw9PROQIwsUS7m$T64myMTsJVFdV9W0d4B-cjt1yDwn$82OcMX77AY0u+jDyW5rhZmRX20JXMJ9lxS6Iog7rWiGBc-x8SXiBYvyJIB2mouoiMRIZ+ESKGKiKctM$InJMl7V2m6KGgLAe5fR9FkLGULiZtXSWVr6CfRJi70Ou4l2N7+kgfRS$iMlojn8MFDLpufo+QAJzk-GnitGdz38I7h2a3nifi1VjyuieUA+zhMs7chMVrA9injIifDWh3MLmNnYojvkamDpyZzKBLsdae$OERUiceOrMC9JMsjbiBEvtzmNFTIE1dZSt38bs4rWFjbOThgreWairMfyJ$QrmQe6m18hsoo2vwtkncN+JMAb$cR4msdPjjDAftRM-YSX65uuIsEMun7tcWEkJnlejmpE1kUaQ5VvcsslvWdgOq--moDKhi-x2mqLgu8E-uOrupMabnYMXX6E0D$B84TPTrcsOf5NbpC2$KPZmoUKK5W-657nzlKZIZsrOCbY6PUjh60yWLa9mbemzI7ANl7OqQM8wR5sqFX3CxPKBUuj+yVAnRn-je-KVyei-UV-5IixP+WplkQeFPArt0Qc8Z5lZyj5dB4Yc-KwlXOc14hC7iUqksj3oMmq3Mp5BwSvJTsatPBiEWvdVnYMXBY9o7rU3u3CvJjQGQxvqn5X0q7B-ZBq8-$R2R2dywSbspOuKM1QsOd1TmytPWqYCTPVkIq6yToLQoTRf1TvxJR6Ud9Xw9f2D8zfRjsC6KMw4QJdW248tbujzi+LXPhDFh5hkuWJWeSepctXfqLXTaB9RMX55o"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sun, 04 Jan 2026 20:19:29 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b8d6e5ead285685-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: loaShsRbtEw4q9No/WroKMNp7k7+OcYNqMcXVHrUZff7bHEdWV6SvKr1bIFZ/dLuViiRALhhU48sJ/lUk8yzww==$WGxxxJI7/TnhGbXy1i9Gow==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DY34nMR7CZERWdyllcF%2BVjvFIKuOJItJ12qCwGCwCmiB%2BOv0W2BVitWmuTuGAZEb%2BISK5%2F0EQMnBIkvAbO8hIqRUHoYx8jny7xvkwNbc6zJ9K72Wj1%2BpYeq%2F%2Baaa\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1305\u0026min_rtt=454\u0026rtt_var=1219\u0026sent=53\u0026recv=32\u0026lost=0\u0026retrans=1\u0026sent_bytes=62213\u0026recv_bytes=4184\u0026delivery_rate=45048888\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T20:19:13.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cotige.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 02:58:56 GMT","end":"Mon, 02 Mar 2026 03:55:10 GMT"},"fingerprint":{"sha1":"90:A0:7E:B0:3F:99:2C:D1:29:59:77:4E:6D:B9:99:39:B7:31:DF:DC","sha256":"BD:AB:85:FC:67:25:95:06:EC:03:78:5E:EA:47:C7:64:1B:85:C2:22:78:EA:84:44:C2:D0:57:9C:E9:DC:70:D3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 04 Jan 2026 20:19:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4a4pW1cnFf7y%2F9gQ5ZTRTvMXIkkZ93BU00SLKr%2FDVbGhIRRr2dARc9tl3635%2FtUsnzO9Vap8c8REnS%2FM0nQGDylSSau%2BoJoqI%2B7Lbxk9u7NXYbnkSW%2FvFGfLbmev\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b8d6dfa2dd2b4ff-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9b8d6dfa2dd2b4ff\", cfL4;desc=\"?proto=TCP\u0026rtt=658\u0026min_rtt=488\u0026rtt_var=386\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3270\u0026recv_bytes=1244\u0026delivery_rate=7109656\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=760977bed612a3dd\u0026ts=47\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7572,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7572), with no line terminators","md5":"e18c9e379156572f139adf1cbe35995c","sha1":"749dab1a88162d4edb474e51ab957843ce59f429","sha256":"a1ed6da7b804bb7cb4ed150ec316d78fc1373e0f17db91e52e3fc141c69ead4c","sha512":"1c194a003dc7a5369359b5d763ef50b574fdb232f80deaa0b3d07fd1d25e3a12700f608f56f5927fa16677e217806225ff8f9238c1687a86f3e62e0d7bddd0a8","ssdeep":"96:PNybXZtIEb0EFW87IClvHA5iAQ2LywioVr8OvH6FJCQgh39jLHbAZJSS3sZX40Ce:PNadBBH2i/wj1891Gt7AnJ0C5Eyjvw","tlshash":"88f18de79501202fe2b52bf30133b3a89252f0029f06d158e8e1d85cdaeff0bd155746","first_seen":"2026-01-04T20:20:00.477579Z","last_seen":"2026-01-04T20:20:00.477579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":30,"dns":4,"connect":1,"send":0,"wait":25,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6dfafb15b4fa","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:14.026Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6dfafb15b4fa HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/?__cf_chl_rt_tk=kZbX3QWsal62gNQwd2rQxdR.QymbjjBnMBbmrlc8hqA-1767557953-1.0.1.1-3jezryyvbyLAdmSXz0qaJfh5MXoLqseRsWCNdutwTS8\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:14 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vL7LqhFOcXP4JtKLpQoeHyO0mQefsMwziTNvvWmkTTk4QD0bSOC31dv1sfwvgwKsrBLbwFjD3bbu2bsP4XKvquA9JyeHOWp1sftJXBxWAJ%2FPrag4IsJKBR0w3%2BEr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b8d6dfcaec25a0f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=453\u0026min_rtt=453\u0026rtt_var=226\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=509\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119840,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d61e2c37e3882da281fe5dcab480e96","sha1":"1f179968c6781c1459e274a06262e55ce5dd5a9f","sha256":"7f4347ecd1ad1b4a3dffc61ab1e0915865e2347d3d326a6bd1b711d1b9fe9f04","sha512":"62055dcf3b643371ec4fb74c9c282971d91ebb0ffeb4f525fc17ca8a7d33e5732c6c0e9dca128fbbfa315605ae23c1d466e33227d3be4626b24cf82db280b389","ssdeep":"3072:iROc2Nyauz2sVY7XIikPdTr2GOa3h7z3Em3+9gzy14c2ac:p9NyauCzXIikPd/2+x+40c","tlshash":"b1c3b4cc64deb56503aa2524542b35cb62babc8c71285c2df912e4d5fce870871b7eec","first_seen":"2026-01-04T20:20:00.479912Z","last_seen":"2026-01-04T20:20:00.479912Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T20:19:16.461Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 04 Jan 2026 20:19:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=p%2F5GXFBvvOc44AUdkvhDv9JeuuzXPJ4%2Fuiahkrg%2BojZ%2Bj4T4UeRsObB69kJX8mBdfcMuitAMdJUEqtR9hMXC6fqk2aOQYT0fE8sJ%2B1tWoiA72qZPMhbYcHpEOoxb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b8d6e0bd8f95a0f-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b8d6e0bd8f95a0f\", cfL4;desc=\"?proto=TCP\u0026rtt=5935\u0026min_rtt=453\u0026rtt_var=10426\u0026sent=42\u0026recv=25\u0026lost=0\u0026retrans=0\u0026sent_bytes=53986\u0026recv_bytes=1395\u0026delivery_rate=22791185\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5332), with no line terminators","md5":"89324daf1797753d99b62a984a7cceab","sha1":"903b3262982ea5d4504472bb49f579e6fe8315d1","sha256":"68e72603d61b0abdbaebe31f10301fb25a4d559f991be417bf60963ad77bf972","sha512":"e19d47fd94ac9475c8b44145e97c91bf4a5929d59559f39b74a3505d6d205c97f9e17f46130c0afe575b38985b1e14f230037db968b406d7cce5dbc894c4c298","ssdeep":"96:PNybXZtIEb0EFW87IheG6bbsQqQBnVioZPVqyM4Yzueh8rmw:PNadBu0AQBnVioSZysw","tlshash":"74b14ce3aa606022f3ee4ff69477b34cd31581a9db016894e981d81c93cfe0f81ae594","first_seen":"2026-01-04T20:20:00.482032Z","last_seen":"2026-01-04T20:20:00.482032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1972468873:1767554674:nZcgwAEw2TNRUeCf43LN-mp802aDrncQg2c18H1cERs/9b8d6e0bd8f95a0f/iH93HcC5hwSyW9.Fz_rILtdY7YTACP7ZUAxpEcK021E-1767557956-1.2.1.1-tKzmmMllfsWWVN5LCAV6RXGm7.o54280FpR.nxbyDplMYbcMAXS1IU_gS4_.9rOr","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:16.947Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1972468873:1767554674:nZcgwAEw2TNRUeCf43LN-mp802aDrncQg2c18H1cERs/9b8d6e0bd8f95a0f/iH93HcC5hwSyW9.Fz_rILtdY7YTACP7ZUAxpEcK021E-1767557956-1.2.1.1-tKzmmMllfsWWVN5LCAV6RXGm7.o54280FpR.nxbyDplMYbcMAXS1IU_gS4_.9rOr HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/\r\ncf-chl: iH93HcC5hwSyW9.Fz_rILtdY7YTACP7ZUAxpEcK021E-1767557956-1.2.1.1-tKzmmMllfsWWVN5LCAV6RXGm7.o54280FpR.nxbyDplMYbcMAXS1IU_gS4_.9rOr\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1954\r\nOrigin: http://cotige.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1954,"data":"2IXstmqw136ahBqmUeWERx2+doRC7AnTUkBcIbgpmyS+GvE1D07cWlxjfl9sl9OdwDly0Cbtla2h+zXBZGzNpAapqnujOK8XKZGZ2y-Jq8TDnkUL01y7GYwJt7bVQNL1tMQsNAxrl2Bj4oUyhv8+i24vjNee12u1aFgyi3b0p69qNULLt7ngtCS9rd8EgF--KvRJEvJTl3wo$glortknbNPIbVB9IRNB5MLNhNwVDD2kj0e7yOaG4ub9Q+KKP0jN6VdRVgJMW9lg0UOgGcxqcqKahBEnkznbKJnu$onDfRpyL$gJVRMZ3BLOwyMVFVEVNSjneZJM5+cfuF1jWz+WjA3bxBUVsh7bcLrcKfIb5$1BaM3-JercLeEfWnQlykVQS0tldoPs8XZqluNJaWcrLifjXnMXVVG2Uqtyig02Xz0GtjMmhByMzCzY6TSzWtRmTKFoXAQpP7mfEolmzQFNww6daGTuVC5odF4CVLsNMzkx7ZgXhzoJrFuxA-I1T9PcX5JwNDeI9m3rKNRxM5W0q01Ofzeix8TjKrzUt+qD5Udne9FUnlh3tZc8Ip1EESA$Jl8gBk$iE8dKkDkmtsvqY82zlcVyTP0crpGI0OpTn4wkBGy2G7GzSNBYBdM8u06bnDSgWCAVDblWg5wNx4rObTIeWWVL1ommbC-9BaBDoLZ6zaKoy3$1VMwcFe$qnzOY2fNvyXGOtt8nutWv6RUDp2JougKeX8baSTsiVM9sTNujKa7a2M6Eum8av4MZfQOMkYLrrto0JcBVZbZq97uO-71vboT2NWRGZh$6O2TPfm+7DyzP-nDzsP5jBVkABUcxaa4Glz28mfJ92ouBBI1kzx1BAr05IoqhsnFOR19BdhCqdeZ82rxBczBw4+JxfS$RefnB6GcJs4QOZV9QuwEdivPkIMoOEgztasqlb2l+8lEzCeTlYl6k7$9JNc7oFBS-84oA81VGokV3A74P62NOiBFBDgr6ow5icA8-apSqVmUoK6wJ-gWfP8$lIKs-B6QFbaTFYBQGiF6Vje1E9Ay0oIicqTQpT9Emc5n2K9c0OLIih2fUcxCzkp8w4ad6g9j+eU1gjzYnNIJwj06cZtsGmKNVvDL-5102Pp3mFYDx59AhZKqrUgh5p4LUXsgr36E3uYsFZlpUAGLhrvM8vQM5$2wYBfitKxnC023+yRQ-1bk6CuBnAocby6S7oDxmnfJyrvPvGods9D3-DorzQL8fJ9v7o8ziuM6cZODRjzcSG2OhJ0EpwgrPe7x-sFls3ORJAAekuutB$Wvynn3dxRe4P9TjqajSOKdo1lhGBFIKBmvWBPe$fPuqFYIDywpaLdYCRlQBmCA5xLuW-MvpayV+L9ax3Y58XN$-5CIW5ZDu9WwzxQCkiroF-qiZ5jJBC22CzIoCFU4GyMW2t4n3bQI1Z$QmSt9qeiyTtGrhM4oR0-X7CKcITjEGev$potI0GzalkT1qu4ErdJh2Aw3CeITEIcgbvGuJ0aSrBe-uqaV-+SXvq1+5lXzCElFMlSU+$YTp$ezxl8yymJ9MOO5XX2NQEETN+nutUTv4eJR$I9jfAThOtD9ardNnZIUnC35F+Jw665GY5Zi7LMofTCINaUzJGNJKO+Rke7LGQoRmxfDr79wl1Ny0pBWDrFvC9suA-09CYoigAufq1arS8nWIS69XKO$dBFEkC40kdSXl1bOL2JTbRYa2AQdRIXS+miPQ6BT7-6CfUeAL2Vd4LuZyUpEvfGoiLvBik4i-IkrjoNU2+mOJvkcEUkNeGt$Fhyna-veDu+wwVNX+nEtgWqbRfE6L$Z8NuU5bfASYo+YnKRjPnzyTCpdUl3p8ir5agKdqJJ5AKDSF$TjflY5+7u2uIpYnqXb6aSSvEENxwD+egg-PYCm0CQkw9eIJCgqztPeI5r$JQKr-b3t4o4M48amGJsc-idrLX2ivU3GIG7"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sun, 04 Jan 2026 20:19:16 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b8d6e0eee1d712a-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: h1My2I9Ez9GtTASU6GaGPebo4SF2uLGg1G1W79j+VDbSSMJyp5nnDS4ZfQEvG6J9KMgS0X+uOtxFdKyXEBx+Tw==$qLP58PymZlzxlpvNZcC+4Q==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=in9VVJHyn9s3OoNH8ugbyesVu17mjBUDwyabXvPduDRIb9SKfQW2DX8sLUVF0msaPMamA9P3LAbKMzadLhLcFbzXUTzbJn0qBoVaXaOWXAI76m09b%2FeSKT4cAZ6l\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1104\u0026min_rtt=434\u0026rtt_var=390\u0026sent=53\u0026recv=31\u0026lost=0\u0026retrans=0\u0026sent_bytes=61946\u0026recv_bytes=4150\u0026delivery_rate=26077038\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/favicon.ico","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:21.133Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:21 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5094\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: \"423e-558944dd8a100-gzip\"\r\nCache-Control: max-age=864000, public, must-revalidate, no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: Tue, 03 Feb 2026 20:19:21 GMT, 0\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nAccept-Ranges: bytes\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yF8cB7UQQJYvrzbhZDeNV9nNzj%2FDOxr4mw%2BB%2F2TUFru6KRUqsWuZAdF7IximbjPdXGypQrEbAGvTkaUZTXLeLKgoj7LrHnuD\"}]}\r\nCF-RAY: 9b8d6e2918ba5685-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"262a60c4e5d2c619741ae58021e40a4a","sha1":"6602fe0b0c8fc677ddfaaaacc2a7e5c154852932","sha256":"1784592cb496692c6ad36e98821ca542bbacb79c76bb4270f008fb4e5bcb3652","sha512":"f836c38eea9373534a557ba758b7df2dac043b7c3ef220e8308758a98478c9111f16147c09639618fe2b5b27f7973c5e7b13a42e6b5d26481297f81acf42dfbd","ssdeep":"192:JR+rlAhg6hRCS1Bvj18Hbjg5iMmhKC7sHuUykRR4:JAWh5Gs2HbU5iMmEPHu7kRO","tlshash":"51724b72bb1ff159e6d912305820e39b57146c3898ea1712ff09fb442d72397ae4e085","first_seen":"2025-07-07T11:22:33.39518Z","last_seen":"2026-03-28T03:41:57.254174Z","times_seen":106,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T20:19:29.369Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 04 Jan 2026 20:19:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Pv1ih1SAmu93avFLa0n5A4d8xAd9ROwLUAV8wD%2FwieJkBRDcZ7sJajj7wp%2B8KtS2A1YtHv0xCaeTlHRxRpQpHnapM5iy5CqNqmtwDI5hdahMY6WfLvQ%2Fjyo%2BaPgM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b8d6e5c8d5b5a0f-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b8d6e5c8d5b5a0f\", cfL4;desc=\"?proto=TCP\u0026rtt=6842\u0026min_rtt=472\u0026rtt_var=12119\u0026sent=56\u0026recv=36\u0026lost=0\u0026retrans=0\u0026sent_bytes=63438\u0026recv_bytes=7392\u0026delivery_rate=36938775\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5332), with no line terminators","md5":"9a2fcdea623a3da61b03f79e185fc29a","sha1":"f1065a763b8af3a1e8325b6e1ae4a93f68055e06","sha256":"e4524578c49dc4e8f4da9f3b4da31f9c7337583d49ef3482863c39ab875d80d1","sha512":"c77b933d95fabe62afee6b39bb9dc24ad5f3be601ced6fc462c5ce245d0a95f8fe0c95abc0eaae4537a98e8a44bc473b3c886b193d937c47a57af3026b0da0cd","ssdeep":"96:PNybXZtIEb0EFW87IQMOVNPvtTBfthH2Ub/NCUhYzueh8XHmw:PNadB7MOVrTDcUCU2yJGw","tlshash":"37b12af7f9624132f37b0be79067f7404321a050aa0d9494f5a1d85ce7def0784aa1ad","first_seen":"2026-01-04T20:20:00.483956Z","last_seen":"2026-01-04T20:20:00.483956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/favicon.ico","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:14.128Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:14 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5094\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nETag: \"423e-558944dd8a100-gzip\"\r\nCache-Control: public, max-age=864000, must-revalidate, proxy-revalidate\r\nExpires: Tue, 03 Feb 2026 20:19:14 GMT, 0\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nAccept-Ranges: bytes\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jdogqPccR64MntOpHLe3r0xF%2Btvg%2BJUHpk9xIOmiQNLMUW4Z40kvUQbjEUwykZ71UoMsR9EKnbtuvTYG6QG9FK7Lz8q2H%2BRo\"}]}\r\nCF-RAY: 9b8d6dfd4d54712a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"262a60c4e5d2c619741ae58021e40a4a","sha1":"6602fe0b0c8fc677ddfaaaacc2a7e5c154852932","sha256":"1784592cb496692c6ad36e98821ca542bbacb79c76bb4270f008fb4e5bcb3652","sha512":"f836c38eea9373534a557ba758b7df2dac043b7c3ef220e8308758a98478c9111f16147c09639618fe2b5b27f7973c5e7b13a42e6b5d26481297f81acf42dfbd","ssdeep":"192:JR+rlAhg6hRCS1Bvj18Hbjg5iMmhKC7sHuUykRR4:JAWh5Gs2HbU5iMmEPHu7kRO","tlshash":"51724b72bb1ff159e6d912305820e39b57146c3898ea1712ff09fb442d72397ae4e085","first_seen":"2025-07-07T11:22:33.39518Z","last_seen":"2026-03-28T03:41:57.254174Z","times_seen":106,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e284fd2712a","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:21.063Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e284fd2712a HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/?__cf_chl_rt_tk=CTU_BTOunyYqxnbaB78gyQng0zhFioJyusE1An6kVzE-1767557961-1.0.1.1-ZmTuXAkloatfeNP1MZvLnrr3f0CzTFmTeQwb7PuExpU\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:21 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cRrm3uqUO%2BS9UzUsoC%2FF%2Bkby%2FjiErKOc79kM9NuiGqbTxOgb1OKMnAbQ7USifpYzs%2FzeurKHbneo8chWrZwm%2FJloXcpt1reyalZw0G3rj47u21S680Q2pTGm9rvW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b8d6e28aec45a0f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=591\u0026min_rtt=472\u0026rtt_var=151\u0026sent=10\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=6899\u0026recv_bytes=3680\u0026delivery_rate=9679144\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123007,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"907c86568adc6a2138db2422d6078a87","sha1":"e8349229e2711228d289b03e0f0c987e9be5358d","sha256":"4ca66a00e8c81e62adeba2bc7bd0d6235ea0bd696a02bf8adcad8bbdf5973f10","sha512":"a8cd884b34bda3e7526edf3fdd4a9fcb68f8ef0498ab5daa2997f257523aa761b7b223fc618577e14b8bb01def687d4cd1f92231f19851681e702597e09d5957","ssdeep":"3072:iA2G0G7qTWm6RKWscIKaxDuZu6EkSYYDuRJ7ZQAkYBQPYbzMw/j91ZM3B2:/2GpuxCEkSYYDVA","tlshash":"42c3c5cd38deb561036b2460502731ca627ab88c31281d1df952a5e5fce872976a7ffc","first_seen":"2026-01-04T20:20:00.486078Z","last_seen":"2026-01-04T20:20:00.486078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/favicon.ico","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:21.088Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/?__cf_chl_rt_tk=CTU_BTOunyYqxnbaB78gyQng0zhFioJyusE1An6kVzE-1767557961-1.0.1.1-ZmTuXAkloatfeNP1MZvLnrr3f0CzTFmTeQwb7PuExpU\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:21 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5094\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: \"423e-558944dd8a100-gzip\"\r\nCache-Control: max-age=864000, public, must-revalidate, no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: Tue, 03 Feb 2026 20:19:21 GMT, 0\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nAccept-Ranges: bytes\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7gRjsc%2ByJIrpaun4y8StcfgxUgIGyMrlhrfAVG9o6H9HEOv%2FNHarEVuIBj1vtSTOylLSw11xlFEoU%2BrAOCArwlJl7hMGIV4WLc%3D\"}]}\r\nCF-RAY: 9b8d6e28cf415a0f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"262a60c4e5d2c619741ae58021e40a4a","sha1":"6602fe0b0c8fc677ddfaaaacc2a7e5c154852932","sha256":"1784592cb496692c6ad36e98821ca542bbacb79c76bb4270f008fb4e5bcb3652","sha512":"f836c38eea9373534a557ba758b7df2dac043b7c3ef220e8308758a98478c9111f16147c09639618fe2b5b27f7973c5e7b13a42e6b5d26481297f81acf42dfbd","ssdeep":"192:JR+rlAhg6hRCS1Bvj18Hbjg5iMmhKC7sHuUykRR4:JAWh5Gs2HbU5iMmEPHu7kRO","tlshash":"51724b72bb1ff159e6d912305820e39b57146c3898ea1712ff09fb442d72397ae4e085","first_seen":"2025-07-07T11:22:33.39518Z","last_seen":"2026-03-28T03:41:57.254174Z","times_seen":106,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:21.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://cotige.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 20:19:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=yfnRA7Sx1oNOBVR1nHQbxv.N3iIUAqhdupEDd7QZQdQ-1767557961143-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b8d6e2919f8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1972468873:1767554674:nZcgwAEw2TNRUeCf43LN-mp802aDrncQg2c18H1cERs/9b8d6e284fd2712a/cJKZ6tl4z4TXnlKniqrnpP.HQpsNDmAFJlqBG.2Owe8-1767557961-1.2.1.1-dRi4yQgsC1lAfboKNypW8Ia72upy1RAHeROqPpJCnT74MG6fBgoCCsW_2xFKutj.","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:21.347Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1972468873:1767554674:nZcgwAEw2TNRUeCf43LN-mp802aDrncQg2c18H1cERs/9b8d6e284fd2712a/cJKZ6tl4z4TXnlKniqrnpP.HQpsNDmAFJlqBG.2Owe8-1767557961-1.2.1.1-dRi4yQgsC1lAfboKNypW8Ia72upy1RAHeROqPpJCnT74MG6fBgoCCsW_2xFKutj. HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/\r\ncf-chl: cJKZ6tl4z4TXnlKniqrnpP.HQpsNDmAFJlqBG.2Owe8-1767557961-1.2.1.1-dRi4yQgsC1lAfboKNypW8Ia72upy1RAHeROqPpJCnT74MG6fBgoCCsW_2xFKutj.\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1975\r\nOrigin: http://cotige.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1975,"data":"YbcxNakFx7Rp-FxMf8Ni8BXCcXDk+EYI-Td7dvXh9S132xVWLasPt+c+LDhV8irwFqBiYbr+noDQqCP1QDG+DuK8LpB1xYleDs0XlOYy5oBNQjqJ+QZM-dAx4p8Gn-u8ONNah5fErqrQBNJIoQGLJrAyuEmZ4VhWpPl2PmjnrEZTxyEBdk1ccaJvrd8Cejr7Q5qL5Ajfjzf0GFxYx-zsFCqDIqyQQXfGGr8-XxtWRLtcVdB6SdrEzRo5ZChi6N-7Ucg2v-vxecjgEX0xgEkQgJhojxBPJ3kDwxpPxtufcTzX+DnvtyhgpwA6OCwVIM5IKNN4+p3f3M+Pik59yBvFc0W7Z8L1qKixS0vdkUBsUzbP+rh3ICZzsb8G2Bk79DfCrRXqeCDt$w0ju92f8k-NRRSU4Qgdrm31Q8a7l2LZ36J746DPRF1T7ESMe10BmzQq5o4LFIjcTwyOdRdQ-PwsJMJdR3+6Tl$joUMPwrP76ZqWT47XIFMKPTkpht74fhx1kARx3VNJLvGoLJ6KW$vzed13dFzQVDWbX9XUXmdaX$1a3v8ODMPPbQ-SP44g0d0CMLLBAcA3DamtZUJTu97YwCRMEaUvWBI1OQL6iIbfgvcGJj9-6YsEos4GsvR81KF0eUmk2zh$AvOaMLv3frVZWp3s-czUhcn9zU8kPO3rrRQEpnPnsxrAspMBlX2Mkvv6tf8cazS+gpASjxrxY7z5vZ3zrviGDfvMkDzeBcfbnbZZxhbzLh+Pl83tBBkfU4mlJemTqMu6l9Gcw3gQJc6tpYUfvbw0x$BCGmA3o1Vg8XyG4Zpkj2P38mUFcNbq$BwfmRZk2pqcW8ghkIhJPOS6hml0NRpmj$WcpTfYBPuTC$jA2QYIV2+$Or8Q7w3pj7Bax7b75WuCSwhCMZSQistVCNOVla$2G96Lfa0zoRP2faMkDIcJGr8iYc$ydW8qyxVwFl0U8DT1qCqxWMJP$6$9IBi7sD6REf8i-79DXWkmTOhdI33KSJfyUYrvyYIuBaqw4LPpO1phcVkERccvI+USuUfGayag5PTtz3f3ppuLjc6bmQ5L-bGFlNLbhbE01kFzt7qXXZgR2TiWzPv9R015yF6Y0EdZbG6Xz9PyZsem-efZmS9kQD7Xo9j9YyZ8WjsY7qbBnwTW8lRTaykJee6loPESbZXfZDRkbv87JkzTTb+0v$uEe4y8e8IPnE3rV2BNEoQgbBvPv02Oc5c8Qqx0AEycW2Y9hO$D4fE6Uhx2x7BizdKPKGafEvLwQjm++jVf2Y13OmlxgWPVbEb0LDXOF6uCQs+9rcm68ZOP2FWav$zM+C9npb$p9MMf+aLwlmSiptO7W1NmAjRm1uXp2gYZOypNQA1i89UQob7TvD+DkvfEl6dnFaR-WaP1F2hZXFfcs52X+eSvKqjcbPh3+V$DSi$MAChuhZ17D-EmclRZE7BdThkzWD9h2ZZEn2J6b+oTetDbtbxT$bAYoME8SDUqbbWDFbOtD+qY1Ab$yYqAKYcUsz8RUFrU9NtuIhs7a7XbkmW5MPRGg+Qp+-gSgs8EbTCv66WQyiZPGGyQdCt0WMfcWSUPJpFIkeyqW9q0-PrZ9rmOp3by$Px9jnY$ST-SZt7ZDCaN047kM4b7MT44l7BvSs6FEXz0r98xJVgjy4Cuc9GxfCPJsCnN5P1fc2KsDX-6GoehP7uL8i$2iM1rC9sg8yzSRwVyRiwkbPPWtGjnVe8ZB4FPKx8vAgRwwFWV6Z-+-Xbb88Vcf7xjCxQPzmK1mrA$OFJEEyZmEM74rqm4nlr+2FS1WkmLfuWqDgQuKBG-6qWvi29Y1vK7BZLJZSehv9DDrJwiOr4dWycW0klvBMyuXi77omltI8PtOCLqv463Bc-AMzS-aUYTzCVGSI8BK-xrRPqmFzkd9sAJi-Smpn7CY5uV6qwshXL03JGZk-wqelEzBqCQEBbxVSDKf6dMZQLE3+pFVe$"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sun, 04 Jan 2026 20:19:21 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b8d6e2a6ca45a0f-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: dHYRLWTGxXkKNF3MeQrxY4/Wnss7onJ6WqPUDXCMuk7cr//oouG0xeKSvfHjD4RfRDKt4Gp8E9AWHc4sJMkx9A==$wadg6sNHkXMLCf4aTi7qow==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PQpwS75jyt2svS5LyLlioz5oZDcQlJIah0V8jUS0eCusAjQ0Mi%2FI7FIUfP3Lp2lBNMvqj00vbQZCyrXCeNXR5akXPGE180KuDU1tbGDC8ctSXessfiFtolv9brxA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=889\u0026min_rtt=472\u0026rtt_var=282\u0026sent=55\u0026recv=34\u0026lost=0\u0026retrans=0\u0026sent_bytes=62455\u0026recv_bytes=6973\u0026delivery_rate=36938775\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e5c8d5b5a0f","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:29.416Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e5c8d5b5a0f HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/?__cf_chl_rt_tk=2LFM.y.9qt9OEav65D.zEnONKlDypMAq_M_NmAoH1do-1767557969-1.0.1.1-RQGOU5xfSWNzF5hNBbUrdk6UGhWNdERRfq9TLRqBRbk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:29 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I0ZBRil4UkYQUVnI9pSmpEvlUhp2ww6vGVMSjBnCVT8aantZW3%2Fud1iLwSC4r7%2FhYAzgQBPWSjCCwqnmbPaFVldiKE5ulNS6q9YzuYUJbpe8ThQaxC6SiZimMhpj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b8d6e5cdb3c5685-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=543\u0026min_rtt=454\u0026rtt_var=159\u0026sent=7\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=5909\u0026recv_bytes=902\u0026delivery_rate=10986342\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125244,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f6a9b9f414492189c5a32975cd6fa376","sha1":"cbd80a1800c39d80c407befdd6051ff0df8b5401","sha256":"c113ba7663e6e6060fa853d1f82913b471e468da0daed59f92ffb8d5d3e2dabc","sha512":"9ed12a20fa897a43a8a98225f5f746e97ee8ae4d2b9c45e577daf7e8a798cba917c6819829a86a94cbcbb3d248107e77de7209280d8f5b47012876dff799e7e3","ssdeep":"3072:ivBxg3Rn62rOOCrXVDRSkWLE/Hq7o1N8+Rj:0gOzVDQkWLGqs1L","tlshash":"3ec3b6cc24da7461036a3560182b36ca65b9b88c712c5d2df542e5e5fcf8b58b1b2efc","first_seen":"2026-01-04T20:20:00.487893Z","last_seen":"2026-01-04T20:20:00.487893Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/favicon.ico","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:29.484Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:29 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5094\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: \"423e-558944dd8a100-gzip\"\r\nCache-Control: max-age=864000, public, must-revalidate, no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: Tue, 03 Feb 2026 20:19:29 GMT, 0\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nAccept-Ranges: bytes\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0EZsQZgL5EA5Zg8jFZp8lyYfKsUUU9i84k0ZcG7anDA1p6PNV919hMRIm4SU2nnWTzUwizhoaxCAerpw4vAaZ4p%2FFHqefvuS\"}]}\r\nCF-RAY: 9b8d6e5d4aa8b4f4-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"262a60c4e5d2c619741ae58021e40a4a","sha1":"6602fe0b0c8fc677ddfaaaacc2a7e5c154852932","sha256":"1784592cb496692c6ad36e98821ca542bbacb79c76bb4270f008fb4e5bcb3652","sha512":"f836c38eea9373534a557ba758b7df2dac043b7c3ef220e8308758a98478c9111f16147c09639618fe2b5b27f7973c5e7b13a42e6b5d26481297f81acf42dfbd","ssdeep":"192:JR+rlAhg6hRCS1Bvj18Hbjg5iMmhKC7sHuUykRR4:JAWh5Gs2HbU5iMmEPHu7kRO","tlshash":"51724b72bb1ff159e6d912305820e39b57146c3898ea1712ff09fb442d72397ae4e085","first_seen":"2025-07-07T11:22:33.39518Z","last_seen":"2026-03-28T03:41:57.254174Z","times_seen":106,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T20:19:13.754Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 04 Jan 2026 20:19:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7RYvlaCD6vfjbRWc33SE21P0pGNTCTI6qrMrFMT7YLCmGYsiHIi83qRfpGip0MKxFU2G5UR8PJTOQcFAv%2B8fQE8s%2FkLdCLbjKoldDdK2UloIDRrIuoX%2FUozvScHK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b8d6dfafb15b4fa-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b8d6dfafb15b4fa\", cfL4;desc=\"?proto=TCP\u0026rtt=754\u0026min_rtt=754\u0026rtt_var=377\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=395\u0026delivery_rate=0\u0026cwnd=244\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5311,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5311), with no line terminators","md5":"1b41ee5f75c973a92220f3b5c34a5988","sha1":"df4e7491be893620ac27ba85bb1c5e1836fdda0f","sha256":"b48bdd4cdccae7bcbe02b9c099b4f8b08fb399f9ff84cec14b4f523aa4ffefec","sha512":"a5283f5e53ef66eb6dfee2ff69d693a88d730cb910c2c09c2b3a200f9294ad3f8b64eae99d537bccb7dab89ddfaf9f1a47ebf7ce2cf9101dd33918dc38b6eb8b","ssdeep":"96:PNybXZtIEb0EFW87I0DyMLxWykbKEuyJHXtTegYzueh88mw:PNadBbDySKbzuyJHZeBy9w","tlshash":"57b14ceb9b011023e3fb0be24437f6586221f405db029dd9e591e51cdadfe4b85295d8","first_seen":"2026-01-04T20:20:00.489654Z","last_seen":"2026-01-04T20:20:00.489654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":76,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/favicon.ico","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:14.059Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/?__cf_chl_rt_tk=kZbX3QWsal62gNQwd2rQxdR.QymbjjBnMBbmrlc8hqA-1767557953-1.0.1.1-3jezryyvbyLAdmSXz0qaJfh5MXoLqseRsWCNdutwTS8\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:14 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5094\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: \"423e-558944dd8a100-gzip\"\r\nCache-Control: max-age=864000, public, must-revalidate, no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: Tue, 03 Feb 2026 20:19:14 GMT, 0\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nAccept-Ranges: bytes\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=979gTsai1BeMtw1P8Xcu6mrx8Zu4DcCp3QFFBqUty%2BUuGSAfaHXxxD4GXPDkKHRW33MAKHOYiXSqS%2BclVler7CeHWdO9Q5vqvx4%3D\"}]}\r\nCF-RAY: 9b8d6dfcdf995a0f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"262a60c4e5d2c619741ae58021e40a4a","sha1":"6602fe0b0c8fc677ddfaaaacc2a7e5c154852932","sha256":"1784592cb496692c6ad36e98821ca542bbacb79c76bb4270f008fb4e5bcb3652","sha512":"f836c38eea9373534a557ba758b7df2dac043b7c3ef220e8308758a98478c9111f16147c09639618fe2b5b27f7973c5e7b13a42e6b5d26481297f81acf42dfbd","ssdeep":"192:JR+rlAhg6hRCS1Bvj18Hbjg5iMmhKC7sHuUykRR4:JAWh5Gs2HbU5iMmEPHu7kRO","tlshash":"51724b72bb1ff159e6d912305820e39b57146c3898ea1712ff09fb442d72397ae4e085","first_seen":"2025-07-07T11:22:33.39518Z","last_seen":"2026-03-28T03:41:57.254174Z","times_seen":106,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:14.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://cotige.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 20:19:14 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=Ov43FKlc9dqDb8CXCOXC_lrWCv605gYORvAuuhCBpas-1767557954181-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b8d6dfd78beb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":6,"dns":2,"connect":1,"send":0,"wait":27,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e0bd8f95a0f","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:16.560Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b8d6e0bd8f95a0f HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/?__cf_chl_rt_tk=_jc5t3kF1Xgxk3f0cNMIoWRICApQx6yV8Aq1TilvR0k-1767557956-1.0.1.1-og6TREzjD280SxNlgr3BwTGRLmd2lU0YzLAoWoYWtBc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:16 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kjVZc3S0CxPclm3Gtvt15wQy6ATri%2BLn7p6lk2MR%2B8nc%2BDt96vrVD6BpltXGITMCVWQr9YrHZwYhD8W6uL8M82rtLjDhgId8AjPo1PzwuIti3GsT%2BbrwM4o7kcIy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b8d6e0c7bde712a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=617\u0026min_rtt=434\u0026rtt_var=270\u0026sent=7\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=5855\u0026recv_bytes=878\u0026delivery_rate=8369942\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123414,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"034229602f26d4f20b72a908b468bba9","sha1":"489998019a1bc050e41ed2b9014cc7730b05a410","sha256":"e68b4b03c7768cf16688f2e1d89e01271f575488202e7c7a64510dc0bae05459","sha512":"46808122f35fbb0fc1cb40e6ee0086fb6990607104cbf75dc54571d70c269aeae92b7ee7b3710cb01a8e640bfc5b1bc01a0f408d894840533ec9cfade575f54c","ssdeep":"3072:i56AKThXFd2YP3ma62hKMa47rhk+XRvY9Dr/caCamar3lx34Jn:c6JkIRvYhf0","tlshash":"e0c3d6cc29da7552036f6475682735caa6a6bc8c312c4d1cf611e6e0bcf871972e2dec","first_seen":"2026-01-04T20:20:00.491208Z","last_seen":"2026-01-04T20:20:00.491208Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/favicon.ico","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:29.441Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/?__cf_chl_rt_tk=2LFM.y.9qt9OEav65D.zEnONKlDypMAq_M_NmAoH1do-1767557969-1.0.1.1-RQGOU5xfSWNzF5hNBbUrdk6UGhWNdERRfq9TLRqBRbk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 20:19:29 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5094\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nETag: \"423e-558944dd8a100-gzip\"\r\nCache-Control: max-age=864000, public, must-revalidate, no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: Tue, 03 Feb 2026 20:19:29 GMT, 0\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nAccept-Ranges: bytes\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RnVxI5NxiK9B%2BtNNqNPtamr9A%2FoSX%2FRZGj8QVjoQga0Y2hnULRIoi0N9dd0PJipDLZWMw0ZY2bnGzO%2BpxzV7wd6guANvwHm7\"}]}\r\nCF-RAY: 9b8d6e5cfb655685-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"262a60c4e5d2c619741ae58021e40a4a","sha1":"6602fe0b0c8fc677ddfaaaacc2a7e5c154852932","sha256":"1784592cb496692c6ad36e98821ca542bbacb79c76bb4270f008fb4e5bcb3652","sha512":"f836c38eea9373534a557ba758b7df2dac043b7c3ef220e8308758a98478c9111f16147c09639618fe2b5b27f7973c5e7b13a42e6b5d26481297f81acf42dfbd","ssdeep":"192:JR+rlAhg6hRCS1Bvj18Hbjg5iMmhKC7sHuUykRR4:JAWh5Gs2HbU5iMmEPHu7kRO","tlshash":"51724b72bb1ff159e6d912305820e39b57146c3898ea1712ff09fb442d72397ae4e085","first_seen":"2025-07-07T11:22:33.39518Z","last_seen":"2026-03-28T03:41:57.254174Z","times_seen":106,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:29.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://cotige.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 20:19:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=4S6uKqgsjQoCbMKN4A1uwC.fmDgIK9DEwdJT9xUZ0cQ-1767557969493-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b8d6e5d4c21a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cotige.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1972468873:1767554674:nZcgwAEw2TNRUeCf43LN-mp802aDrncQg2c18H1cERs/9b8d6dfafb15b4fa/DI_69SxvVR1gjCLOslMPUyEoU3AYfOVYpTzXuxGFXm8-1767557953-1.2.1.1-rR9_ID2_MzqQt0JVrAMMgxh0Kpzlyz5zhMU90IIPC8tml6VV5uB8tmw1mQ0G_RgY","fqdn":"cotige.com","domain":"cotige.com","tld":"com"},"ip":{"addr":"172.67.204.212","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://cotige.com/","date":"2026-01-04T20:19:14.426Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1972468873:1767554674:nZcgwAEw2TNRUeCf43LN-mp802aDrncQg2c18H1cERs/9b8d6dfafb15b4fa/DI_69SxvVR1gjCLOslMPUyEoU3AYfOVYpTzXuxGFXm8-1767557953-1.2.1.1-rR9_ID2_MzqQt0JVrAMMgxh0Kpzlyz5zhMU90IIPC8tml6VV5uB8tmw1mQ0G_RgY HTTP/1.1\r\nHost: cotige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cotige.com/\r\ncf-chl: DI_69SxvVR1gjCLOslMPUyEoU3AYfOVYpTzXuxGFXm8-1767557953-1.2.1.1-rR9_ID2_MzqQt0JVrAMMgxh0Kpzlyz5zhMU90IIPC8tml6VV5uB8tmw1mQ0G_RgY\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1975\r\nOrigin: http://cotige.com\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1975,"data":"DQ5lfOl+rPGSSlwbW4+w25BO1yxqWUAhT1yO6AtbyMC457txVb9YXGbTy2UNQZPMuqRLSfKk8wBNISY+iEnE+a9vqXqzLMu59A1uVZ0jwVL04vc8NAWGUer+yTsmO-tSJlRwuNjd7Y8EMlXICyJSq4GGk+vTb0fMYqD6NNKO+YcZ6nUP0ws$qugTWg$SvDc-AxamYV72qrCEw+Zl5X-$vZGC05QzDxD9aSa3wILGGFz16AwIq8BEZfWJ4fF7YGrJ52bmc9t25qwX-M8oUdkdwWpNFOtkDXe8I5MSci6sKvAphhabpza+Mnq6h2qdlNnTEjCMO-iwTyulg3h7uw9wj4XBKF9zjil7hIohlDO7O-ucsesvZcU8aYP6v+tIJY4RTQl$-jcBMXSZpirtIQkp9orcRs6CxnVDOGibrVGxBR3KZV9UY4Y2cjvfzUEC3djwUJnxtrasRPtgdONDnV1P0DGsaC$-fKQ$DT$40oJdcRWXV4kSxPIzpEpEAEO84RJLuTfDqR-pQs$sA+E67S-MGcDoQX$vqOKKT1Z6yI1VvXLwmXSPDZpSVIDPDi0J-+MnWdLvG6FkF475DTGT1+j-0hIybdXV80lFJdgusVWF19OAKbXwQGfrcu3KWQ3RlD9Xv4n3OWnK6vgnhNT2CXuu0MbpvmCJW8lLZUkmT25dotRpEfzZiGoJ9UI8Ms2P4O3o5RmVadzJgeb18FS$-gtUUq84DWLfZBpsSyFl99a5BwipceTAjSSRQRu9XYsNueoSRtoDDYeatdzvxm8nY0lbziq1$6$DKyqxf7l2TsGr0G8XeCD2B9TtEQlx3O+bVulWeWG54YuF5$WBi-pKxSoKVnnTz2x4FP20+Gx+N0Lq98gQ8OJBv+kYF8My9VXSMmsX1JkyG0IWIlyawLVZwUohfc9p9zIK7hf1Jx0WW5OwhOc9zGasK0bsghWBogwM2aVyfF1-pKBcUXF6yKt0qCjEs$NfMXl3snKo7qtwZDrqMQD8D7LmFmfntftflIsNaFSq99RDERepMs7LswftLt97h0IY3spur9ynyjbU3faNqvE5hFwlKwmK1wmX5-3Q7nhVcTTNDbj-8nlqf-S8Cq-SnMdpO5u8C4j2OQtvM98rreFFJJI3--tPBiocR48OLdOCQ2n3efZl9rBgMpqrebc5w3LGvl3wqWfzIxfiWZte8mSETdMf9bRdumZ$FFOarv0yBzrgFQtAgrt7SMihls9Lt7qG5UoUk93vP2Vo$7mtem-RULvgpoGgsyDDQznR8uzYi+sQfbwYc8Mqci3ELEGtpibU9v9BrIl-JbJO6xgJW3E8s2s4aW9n+CDr1123LK907vMNG$0uxmbgkz8c5441RacUa$X04qI2$mhPwq5iWownVgU3FQkC4$DNoFP0bZtq4mNKLyE1tzwDT$0WXwtOjwiLLGKYEeQiLVORK1ODjyJfz92Mv911-AtDDqjZU7hgCTdEhB0nv8CY557vF$wEXqiU-duV$BP13Cdebwu5VhF18hxvrmgoceSZEq8U2NBsAs73pPZpA9PpWXQ+zw3oG-n4ebrLKiZ-mXtsju1lAPFebzG918kIvehmuQj8o-d35xxCRr-fKJmME9OUMim-eE1jihB40FseajDpAbhT6e1qIlZQydCnAcm$euzW8lZNVtIPRnTpPvwQWwcpk3kwGvhdfbpl8IErXFQNTzf$VnDIOVeMN851Nyx1NZfT7Vge29psb$4q+Vwx2gy7hucKBo5y0-QiD90TCosPhtFKDOm$S2uXQYXy4+08OJDi4YoCRrca6tsMwK9IDIGuIEYbv29WXkTBLUzn9Fcu33b71D6nExxAPwx2Lz$VgZqgci4ZBVTJ$fP9nLpP+wk-3WZFwI9QPqn68b9oLieFghyckU24K9K4VBc+DFbgm7nToLAa52+Q3SXMslF$Ts4-IszFOAYMZM1vrDgyR4y9P+qb4acNFYwhYmlzLeZ"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sun, 04 Jan 2026 20:19:14 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b8d6dfeee7c5a0f-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: VX99bXBQmMA/35pi1kZ0M55erx1qtn3PRNSYpSJ2Yl2VIM9Mdble/ym8B5Unx9AoFmXAJlV4RnkPGcFQ4CyzUA==$pIp2cI7Rs+sS9o9U03gZ/A==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GbqZ7pakUjWmLfomFysQB5KvNFjP30WeJLOH%2FpGHjplzLRN6s5voLK8%2BhexdhtpQ%2F0yhyYReFMXX280isoR%2FsER5KDBK5TNqHkgEk%2FE8MTvmyI%2FUGLv11REibKC6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=516\u0026min_rtt=516\u0026rtt_var=258\u0026sent=2\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=2778\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"cotige.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}