{"report_id":"7908d0d3-ea52-4690-a9be-aff0c0d9dd1d","version":0,"status":"done","tags":[],"date":"2026-08-24T06:16:32Z","url":{"schema":"https","addr":"modnode.app/efootball-mod-menu/","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"104.21.17.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"modnode.app/efootball-mod-menu/","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"title":"eFootball™ Mod Menu for PC | Mod Node®","dom":{"size":12474,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (408)","md5":"201992d2392b28213d13aa1385e42366","sha1":"54ee6588a1dcae7d2a69f85ecd42875e7b8ace3c","sha256":"f644eecaeb9e5a7d463ff5b09ef644a215953b08efafc034308c4c6ca481460c","sha512":"94d216e3b7ee367348a27fe4dea192f6f236b6c051a9f132ef26cff463a2830dcf263d413e9369cb596c3c258a739f55bb11384aac0cefe4da634ff3f8ad0c6c","ssdeep":"96:nef8pNP2TkbJ26G6Ed2zNLMLewyR0NOUSh6D6rdvjiJh5JjHf/isQlLQp42f6ECT:g8pNFE6R5YewqDLrdvjeRmup42qj","tlshash":"99421d2668f1b173019792e36a765b677fe1d603da5b610032fc8b985fd3c82cd5702a","dom_hash":"domhash9d4362a792d6e97c964c542cf552af1c","first_seen":"2026-08-24T06:16:33.297428Z","last_seen":"2026-08-24T06:16:33.297428Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"modnode.app/efootball-mod-menu/","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"104.21.17.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T06:16:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"modnode.app","ip":{"addr":"172.67.178.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-31","domain_rank":0,"first_seen":"2025-08-18T20:47:11.601007Z","last_seen":"2026-08-24T05:27:22.902884Z","alert_count":12,"request_count":6,"received_data":109135,"sent_data":2995,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"modnode.app/assets/script.js","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"172.67.178.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a09ac83eddf5b3c942989ef00a069ae","sha1":"b712ca630ad9ec7a391702772bdc0fb56ec162cb","sha256":"14bfcfb6c50184d600dcee8575f6246ef2a4d79348da98a5e1e736e5f45f03b6","sha512":"43b6b58caa2427e3a35515f4208fe66676f7dc0a5579827920d934ceec9e1c65a2c228561401e0084138875039dc17348ec37e3a1eab2b8d93aeb58fe8afaa56","ssdeep":"","tlshash":"e8319a2b112420368033b7bbd2a58390fa2520dbb04265563e5d8a4d2f73cd1adf2deb","size":1759,"data":"","first_seen":"2025-10-07T20:19:33.768978Z","last_seen":"2026-08-24T06:16:33.30908Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"modnode.app/images/icon.png","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"172.67.178.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://modnode.app/efootball-mod-menu/","date":"2026-08-24T06:16:06.226Z","timestamp":1787552166226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"modnode.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 14:31:28 GMT","end":"Mon, 19 Oct 2026 15:31:25 GMT"},"fingerprint":{"sha1":"07:B7:BD:54:56:D6:7A:D7:8A:4E:5E:3B:26:E5:62:82:09:12:23:81","sha256":"45:38:2D:79:5B:8A:55:0E:31:A1:60:B1:FC:FD:34:CA:38:C6:AA:AC:BE:15:6E:89:7C:3A:D5:17:17:9C:A8:CD"}}},"request":{"raw":"GET /images/icon.png HTTP/1.1\r\nHost: modnode.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://modnode.app/efootball-mod-menu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXGg5Us68df7256ofpQmA69Pmrxl4Wm%2FlZ3E%2FsYh3By4FzgpRvVDYnMPxROUxKs7O%2Bs55OTzXqVph9uSwXea9%2BNeaLdoi%2FCSFTBY79PcG6MtWD3VcMw7BPSRxB5WPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=259200, must-revalidate\r\netag: \"eed72b92349a78d72f9a2c294a8c0d9f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Mon, 24 Aug 2026 06:16:06 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a30039eeec2b56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8116,"size_decoded":8973,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"e0d5ea09e2feabc2861976948e2af95d","sha1":"17bfd7ec41c503bc3d103aae18aeb4409c51e770","sha256":"f64cc7df817d85fd72bc1c9fa50c714dc2a2007d4263d60b75a8ad4c3ae1037a","sha512":"28d19c6fb1dc450b685ac6d67bd4606e8c8297efc4d036f84a59fbc334f00799301231da53f4278e4e45ed919fb5ed5e2731f145b1b78f48cf000644448e1434","ssdeep":"192:zJRTjY498NUQU6VBzy2OxTJpXVqSAk5441ybO28cyFPVU+:VG498vU6VRy2yJTbAptPAU+","tlshash":"71f1aec1a1e71682f36629cb582b272621d6f4e7e772a44209279dc2fc11b58983d1dd","first_seen":"2025-10-07T20:19:33.772125Z","last_seen":"2026-08-24T06:16:33.302241Z","times_seen":6,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modnode.app/efootball-mod-menu/","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"172.67.178.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T06:16:05.551Z","timestamp":1787552165551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"modnode.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 14:31:28 GMT","end":"Mon, 19 Oct 2026 15:31:25 GMT"},"fingerprint":{"sha1":"07:B7:BD:54:56:D6:7A:D7:8A:4E:5E:3B:26:E5:62:82:09:12:23:81","sha256":"45:38:2D:79:5B:8A:55:0E:31:A1:60:B1:FC:FD:34:CA:38:C6:AA:AC:BE:15:6E:89:7C:3A:D5:17:17:9C:A8:CD"}}},"request":{"raw":"GET /efootball-mod-menu/ HTTP/1.1\r\nHost: modnode.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PcbvJmvwVbQAjw0uzBWZQ%2FzNeQSd7DVj6KzJLK9YNxZC%2BGvjuRc8rfUonu88CoaUzqhP501pTTSSQef1mJ7M4ppskKmaF1rebyxTOhN6SIvWRO5X0KwHUf%2FChRTTFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=259200, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver-timing: cfCacheStatus;desc=\"EXPIRED\", cfEdge;dur=40,cfOrigin;dur=57, cfExtPri\r\npriority: u=0,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Mon, 24 Aug 2026 06:16:05 GMT\r\nlast-modified: Mon, 24 Aug 2026 06:16:05 GMT\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: a30039eafc1756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12689,"size_decoded":3834,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (358), with CRLF, LF line terminators","md5":"d487a83015c997282632e783bf44b09b","sha1":"220e136a4eeab8729ce4e5f5392c13cec4d174dc","sha256":"1f01c53a687fc428c1118aeccdb470f93b768da6bd59ad904e09906e12fb46bc","sha512":"7a03358fa62b155ade2058f6d30ced52d3210f785d82a17f373704aa06200a96df77508cc103b4b0fdfa3cfafb019b2bae4498cd49d17719cccbb3813c87794a","ssdeep":"96:jf8yNSI7l2OJPpBUG4SdF4yCMS3wxN+NfgSh6M6ydj6PxjHCi2ln1+Af6qz:D8yNlMgBUPWc3wDeyydj6ZHK+A3z","tlshash":"1b42a93a68d1b13342b782e75a655ba6fee1c243c64aa10032fca79b5ff3d50cd57062","first_seen":"2026-08-24T06:16:33.304802Z","last_seen":"2026-08-24T06:16:33.304802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":23,"connect":19,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modnode.app/assets/styles.css","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"172.67.178.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://modnode.app/efootball-mod-menu/","date":"2026-08-24T06:16:05.892Z","timestamp":1787552165892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"modnode.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 14:31:28 GMT","end":"Mon, 19 Oct 2026 15:31:25 GMT"},"fingerprint":{"sha1":"07:B7:BD:54:56:D6:7A:D7:8A:4E:5E:3B:26:E5:62:82:09:12:23:81","sha256":"45:38:2D:79:5B:8A:55:0E:31:A1:60:B1:FC:FD:34:CA:38:C6:AA:AC:BE:15:6E:89:7C:3A:D5:17:17:9C:A8:CD"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: modnode.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://modnode.app/efootball-mod-menu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQ7Umf7l1fRLifiBCXs%2Bpmpqn7qci5%2BT7gDfM2Naarr9%2Bh3gN0VNyxPBGlqe57Qa68UO3hH8vA2QjOoYG1Oz96HWaXJUaGDcDQ1%2FSDJXjLv7rcZgD6V0X95Zk4zvyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=259200, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b8e905d28ca1fba14d1bd30dd9de3891\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Mon, 24 Aug 2026 06:16:05 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a30039eccc2156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11980,"size_decoded":3539,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"1dd15b77ddc4e4f057dd0ab7956403f0","sha1":"ee2125385d3881e93df6628b826ed8be1b3cb86f","sha256":"cd79368a772f33a7de346a2a09171293befe6cbbd10e895579f59ff480ac9ada","sha512":"bf9e0f6c95771ea71210163fd683b2cdcc88af175a28bc5686e06c0d67792eee3966bc69ee2a249b493720bcfabf01388ebd2ea315283078ef5e6562fc6c1912","ssdeep":"192:H1ZnPCT8cIGjU9/jTz9AQxPddmEzKNRQNClb9AKSyG4BEQJ2e2qj:W","tlshash":"4532335da60215026237deb8aff24756f7948063cd0641bc7bdea2448ffa074d6a2f8d","first_seen":"2025-10-07T20:19:33.783515Z","last_seen":"2026-08-24T06:16:33.30777Z","times_seen":6,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modnode.app/assets/script.js","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"172.67.178.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://modnode.app/efootball-mod-menu/","date":"2026-08-24T06:16:06.095Z","timestamp":1787552166095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"modnode.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 14:31:28 GMT","end":"Mon, 19 Oct 2026 15:31:25 GMT"},"fingerprint":{"sha1":"07:B7:BD:54:56:D6:7A:D7:8A:4E:5E:3B:26:E5:62:82:09:12:23:81","sha256":"45:38:2D:79:5B:8A:55:0E:31:A1:60:B1:FC:FD:34:CA:38:C6:AA:AC:BE:15:6E:89:7C:3A:D5:17:17:9C:A8:CD"}}},"request":{"raw":"GET /assets/script.js HTTP/1.1\r\nHost: modnode.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://modnode.app/efootball-mod-menu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36UAsFbKykk5B61jmmHs4J%2BDTHjTBPEdBwyPSHLcorXvSbuwFocTDeTPUh9zlj3XVkzkxSr3WovFdYFnhpPfopggbUcR6pFUJ0zJ95Y4SJ8feKimWSnOfnGaMk8BCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=259200, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c54c5736cc2ef0d16c8e44dc0583ee65\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Mon, 24 Aug 2026 06:16:06 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a30039ee1c2656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1759,"size_decoded":1440,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"8a09ac83eddf5b3c942989ef00a069ae","sha1":"b712ca630ad9ec7a391702772bdc0fb56ec162cb","sha256":"14bfcfb6c50184d600dcee8575f6246ef2a4d79348da98a5e1e736e5f45f03b6","sha512":"43b6b58caa2427e3a35515f4208fe66676f7dc0a5579827920d934ceec9e1c65a2c228561401e0084138875039dc17348ec37e3a1eab2b8d93aeb58fe8afaa56","ssdeep":"","tlshash":"e8319a2b112420368033b7bbd2a58390fa2520dbb04265563e5d8a4d2f73cd1adf2deb","first_seen":"2025-10-07T20:19:33.768978Z","last_seen":"2026-08-24T06:16:33.30908Z","times_seen":6,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modnode.app/images/icon.png","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"172.67.178.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://modnode.app/efootball-mod-menu/","date":"2026-08-24T06:16:06.101Z","timestamp":1787552166101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"modnode.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 14:31:28 GMT","end":"Mon, 19 Oct 2026 15:31:25 GMT"},"fingerprint":{"sha1":"07:B7:BD:54:56:D6:7A:D7:8A:4E:5E:3B:26:E5:62:82:09:12:23:81","sha256":"45:38:2D:79:5B:8A:55:0E:31:A1:60:B1:FC:FD:34:CA:38:C6:AA:AC:BE:15:6E:89:7C:3A:D5:17:17:9C:A8:CD"}}},"request":{"raw":"GET /images/icon.png HTTP/1.1\r\nHost: modnode.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://modnode.app/efootball-mod-menu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXGg5Us68df7256ofpQmA69Pmrxl4Wm%2FlZ3E%2FsYh3By4FzgpRvVDYnMPxROUxKs7O%2Bs55OTzXqVph9uSwXea9%2BNeaLdoi%2FCSFTBY79PcG6MtWD3VcMw7BPSRxB5WPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=259200, must-revalidate\r\netag: \"eed72b92349a78d72f9a2c294a8c0d9f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Mon, 24 Aug 2026 06:16:06 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a30039ee1c2756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8116,"size_decoded":8970,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"e0d5ea09e2feabc2861976948e2af95d","sha1":"17bfd7ec41c503bc3d103aae18aeb4409c51e770","sha256":"f64cc7df817d85fd72bc1c9fa50c714dc2a2007d4263d60b75a8ad4c3ae1037a","sha512":"28d19c6fb1dc450b685ac6d67bd4606e8c8297efc4d036f84a59fbc334f00799301231da53f4278e4e45ed919fb5ed5e2731f145b1b78f48cf000644448e1434","ssdeep":"192:zJRTjY498NUQU6VBzy2OxTJpXVqSAk5441ybO28cyFPVU+:VG498vU6VRy2yJTbAptPAU+","tlshash":"71f1aec1a1e71682f36629cb582b272621d6f4e7e772a44209279dc2fc11b58983d1dd","first_seen":"2025-10-07T20:19:33.772125Z","last_seen":"2026-08-24T06:16:33.302241Z","times_seen":6,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modnode.app/images/mod-menu-showcase.jpg","fqdn":"modnode.app","domain":"modnode.app","tld":"app"},"ip":{"addr":"172.67.178.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://modnode.app/efootball-mod-menu/","date":"2026-08-24T06:16:06.103Z","timestamp":1787552166103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"modnode.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 14:31:28 GMT","end":"Mon, 19 Oct 2026 15:31:25 GMT"},"fingerprint":{"sha1":"07:B7:BD:54:56:D6:7A:D7:8A:4E:5E:3B:26:E5:62:82:09:12:23:81","sha256":"45:38:2D:79:5B:8A:55:0E:31:A1:60:B1:FC:FD:34:CA:38:C6:AA:AC:BE:15:6E:89:7C:3A:D5:17:17:9C:A8:CD"}}},"request":{"raw":"GET /images/mod-menu-showcase.jpg HTTP/1.1\r\nHost: modnode.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://modnode.app/efootball-mod-menu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2VNCAaXSAyztkpeLa%2F%2F%2BEQVxwoNb4pskSYlJLOqmTr3jKuD5rk0NhrSAItT7uTxuXL%2FQEGEf00s5oYrMEgcYzyqnlToKkeGT4CAkyHM3nER9CiInklx9xDeKG%2FaYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=259200, must-revalidate\r\netag: \"7a103e232c828ccc6287cfc75e27d800\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ndate: Mon, 24 Aug 2026 06:16:06 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a30039ee1c2856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61244,"size_decoded":62100,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 900x585, components 3","md5":"84c7ed987f90d1e03bed3ac2bcd92adf","sha1":"b358d41b8fc37b24696c3632cfadfab0b8e91ed8","sha256":"9ba0228029e0ec1f9fa3a6854b6dad700862d90724fc1e0c210203f303618dfa","sha512":"60dc5069641cb787a723645692074bd61430c3dff78c991ed611176e9c8f376e20363e0a80dd0c7580b78e82976f54b841dde42aeb3d94fc14ccda9a03ca3a15","ssdeep":"1536:SIYjn3O343cQGu7xQ1vxpI/sRgU+SpSlV3U/I/:N4nmMOloseUvpiV3b/","tlshash":"fe53d003c449d241991c83b9b6c70d9c2e5f7936aa213fd9217e6f273ba16528cfe06d","first_seen":"2025-10-22T20:53:28.567147Z","last_seen":"2026-08-24T06:16:33.310322Z","times_seen":5,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"modnode.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}