{"report_id":"7a581728-ce25-48e8-8a04-a7459d98d1f2","version":0,"status":"done","tags":[],"date":"2026-08-23T16:01:23Z","url":{"schema":"http","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"title":"Midnight TGE | Home","dom":{"size":355951,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"3c4af867d9237e6cb9bb1bc311652fa2","sha1":"07975ee300a196c4a82588b9e2de166460b9aab2","sha256":"51779b6712ac6dee2cd480a9c19ec8cb760d3489bc54d87bda77ed71c3c8bf7b","sha512":"3c8a14903fa901bff6e5fae910645161090a531e534d753b7c6db9cdd499930c50548392aba33c45c2ddb964a8c1e7258ce0ae3b560438bbc09aa7d7cf9e3bad","ssdeep":"6144:us+SQWezdxR8hf9wydpyY5g1s9DKz6v0yVb:Jwihf9wydCCv0yVb","tlshash":"65744a3226c0f90e94938a8ee57a5d25703ecaabd79ec1ddf18cc92181c507e7e9395c","dom_hash":"domhash12b6a27cf7da9761f61d30b9503213ca","first_seen":"2026-08-23T16:01:42.794002Z","last_seen":"2026-08-23T16:01:42.794002Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T16:01:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"mid-night-pd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.123.94.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-08-21T19:28:41.78346Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":633,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"mid-night-pd.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-11-07","domain_rank":0,"first_seen":"2025-11-14T20:58:48.896023Z","last_seen":"2025-11-14T20:58:48.896023Z","alert_count":3,"request_count":3,"received_data":0,"sent_data":1626,"comment":"","tags":null,"fingerprints":null},{"fqdn":"files.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":1688565,"first_seen":"2019-05-16T16:49:35Z","last_seen":"2026-08-21T20:38:23.759774Z","alert_count":0,"request_count":1,"received_data":3601,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cmp.osano.com","ip":{"addr":"65.9.62.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-10-18","domain_rank":23165,"first_seen":"2019-10-16T14:51:22Z","last_seen":"2026-08-20T08:06:08.078494Z","alert_count":0,"request_count":1,"received_data":251933,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-08-21T18:03:58.423155Z","alert_count":0,"request_count":1,"received_data":18546,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"consent.api.osano.com","ip":{"addr":"108.157.229.69","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-10-18","domain_rank":52850,"first_seen":"2020-02-01T06:11:29Z","last_seen":"2026-08-15T04:26:32.69393Z","alert_count":0,"request_count":2,"received_data":1189,"sent_data":1091,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.74.8.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-08-21T18:03:58.464505Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":539,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ai.midnight-pd.org","ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-11-15","domain_rank":0,"first_seen":"2026-08-23T16:01:33.571795Z","last_seen":"2026-08-23T16:01:33.571795Z","alert_count":63,"request_count":63,"received_data":6821349,"sent_data":33805,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-08-21T18:03:59.211095Z","alert_count":0,"request_count":7,"received_data":415069,"sent_data":3385,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-08-21T18:03:58.201814Z","alert_count":0,"request_count":1,"received_data":7743,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":2,"received_data":32522,"sent_data":1108,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.hsforms.net","ip":{"addr":"104.16.5.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-18","domain_rank":43845,"first_seen":"2013-09-26T02:52:40Z","last_seen":"2026-08-20T15:06:27.871339Z","alert_count":0,"request_count":1,"received_data":608018,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b44274c0b7098708a3fb0e1a1ec873c","sha1":"294719059edfdb14c461172b3dd60061175db519","sha256":"6e54bec2de6f7bd3de53387cf18facdd35972e96c684f4116a698b739fd9c34e","sha512":"c2d931c0f4b160a9e156ec728dff4e49058165ec3632cff67a87917895c0c0b7a9cdb6d38162d5cc1fc4b5fc6332cb263ab75745120b046ff7eb73dc55248b93","ssdeep":"","tlshash":"89c0c0f340483c0ce3039140293302835f8303cd418abcc4e602c03312da6cd2620e5d","size":180,"data":"","first_seen":"2025-08-11T16:38:13.720776Z","last_seen":"2026-08-23T16:01:42.895139Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"542ad83f60f3695bae2118d29f94ee02","sha1":"7d8adf886392bea833d822082d8de66d1891b563","sha256":"4857544380b322ecbb6e2f8263319c96dde4728a9f26e5d3b354eb69150752eb","sha512":"d1493be9c3d83fcdf63bf0e433282af5fb6f595b287a23b00f525785ed07361cac24c3632cf4e9ba661a0f6c4899da893133f31a2828d32415b5dc4495ff1192","ssdeep":"","tlshash":"45c02bb6a08f0c05c10301801cf310f39bac051c4500f4c18f3bca38b2a855e20c0f9d","size":142,"data":"","first_seen":"2025-08-11T16:38:13.723296Z","last_seen":"2026-08-23T16:01:42.897071Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"13b5b737b9d222eedff08eac2204b1d3","sha1":"aed25141e1bd3471697129baeb83cab5e79fefff","sha256":"02381b9e4bc5337cd48c36c5fc63bd8b8636d380a0b23a9a6f780bd4b6d93d83","sha512":"7072b8ad44a561dc515d744c8210fa075fbc9422fd92e54856fc11862b77e18d63c63b31c09e0b58ad8f5837f0538e6ab7476708d34cfa6bf6c2abddaaa8b2c2","ssdeep":"","tlshash":"fde0a27d3c30918147a200f881a6f2283e1a30204454ca57889a8838acf0fcaae02988","size":416,"data":"","first_seen":"2026-08-23T16:01:42.900821Z","last_seen":"2026-08-23T16:01:42.900821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-23T18:41:03.474105Z","times_seen":102537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac2e2b7da35909b4a9a8ca64d6c2152d","sha1":"d3ac721fae3856fbe5ba16f90a527d4bf71f4d88","sha256":"00c5be0a478f5f6b912bca3c1977345c0c330f6f3f1adf9b50bc3f340f24e913","sha512":"fa134dcd615d88988f7ac9a128c8d5fca462a418ca37d8d5c44826a7dda36ef68f7cee9fd7319282e86f259e9ddc9f0d882732913996d24c155532949d40f8c0","ssdeep":"","tlshash":"4ef0c804fc82fce6ac21ed5a71354da590c9ef7881d5d58896cec6c3c1a50780785a4f","size":562,"data":"","first_seen":"2025-08-11T16:38:13.72656Z","last_seen":"2026-08-23T16:01:42.903401Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9edbe183081f3b014b03f41bffdccc06","sha1":"3c5b2776b49b39ede9ada2c013d70618f10d3b1a","sha256":"1ffd4a3d29b30bd8a8d169ce102d55555440a3c15a63c59bc77c3fd223b23686","sha512":"ed94e751067fee33b1bf1aec7bfad477f67d1e76fac3b54bfa1f843bdb4f2d5b145114e496ef53095525478978acd6942e7e92c1a95e3d6dd8260c2208a7b146","ssdeep":"","tlshash":"53c04cf1f6d08cd614360a92caf72c1501d6dc2c5125e9041155d15c14f993cd4d1e4a","size":141,"data":"","first_seen":"2025-08-11T16:38:13.728997Z","last_seen":"2026-08-23T16:01:42.90509Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9ff7f413d30cdbc6463c18a6c3791e8","sha1":"9c28f1ff7e039f01a486bed99957f8749330d3b1","sha256":"745cdbda5dd06cb22cbab6a7c45dd62e1b1d3af9eb62cac4fb12b5d99135d635","sha512":"3b3c1eda3c7f706ab65b74d9061c035eaac4bc6db255af5021bbcb25c248ac75f167acd1d5300ec7ac2eebcc8541fbed7dfb20a72f1b1415b241c0b8e72a8527","ssdeep":"","tlshash":"ad51de3d2805de4bec6d7d69027e6c3668c9497b0395cabc86c9cf044a4607d27dbec0","size":2939,"data":"","first_seen":"2025-08-11T16:38:13.731411Z","last_seen":"2026-08-23T16:01:42.90694Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"995840ed783d36e00e623dc431147cb2","sha1":"631bc0dee9df690114f66f10b80c92e229f6cb65","sha256":"ea482c7be25c985d951696bc9392766cb21510be7a52e330a8b09a9bb54c3cbd","sha512":"f6d77eac33e12c6a174d88917dc5a07d266f96261c71d8693da6023db8d08e846e84e9b10cf149807a815fb74bee932958ba0668c08b70bc87435ca625a5d313","ssdeep":"","tlshash":"ca41b20badc0ff606d69cdf512326e96e06fffb2c2b9c70dd90cb496d099129478a505","size":2172,"data":"","first_seen":"2025-08-11T16:38:13.733837Z","last_seen":"2026-08-23T16:01:42.908713Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c4da28aedb607dadf443417d0aa066","sha1":"d4754b271a6f9d35f1aeaa242054ac7bc2bbf6f2","sha256":"95dad0cb3cd5bdea7930a1074b59036edc31afebd085d66840398c49e8abe254","sha512":"19ed582f43b0bc60356c8761fe57990047078b7db821fe4c2ccc4e10e57cb1c8adadebd6a86fa9ff9274ca8feeb9449151e62b897bb8e812e25dd3125e77d7c4","ssdeep":"","tlshash":"ae41900badc0ff606d65cdf512326e96e06fffb2c2b9c70dd90cb496d099129478a505","size":2172,"data":"","first_seen":"2025-08-11T16:38:13.736385Z","last_seen":"2026-08-23T16:01:42.912874Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3905dbcb4dd1b856c20f5a62b2df873","sha1":"16c361906cb4cd9bf45c595a4c7be17ee2a154bb","sha256":"bbdab3a29eb8b1808c32bb9e58bff46ff632346a236274f93f10c43c1330a926","sha512":"c8d67b2ba237a7073c3d25f7e8c99153a2156765eecf5fd742652d529763d8036da4f6b55d6f7594927c26ad1bbddce5dc866a0334db2fb73c91308d55bd00ae","ssdeep":"","tlshash":"5e416f0badc0ff606c69cdf912366d96e06fffb2c2b5c70dd90cb496d099129478a50a","size":2172,"data":"","first_seen":"2025-08-11T16:38:13.738738Z","last_seen":"2026-08-23T16:01:42.920614Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ab794d0837c9c24133c3095c216e149","sha1":"8e33f7609c096e9a60b4568e89df942082d55acc","sha256":"a2635da679cf59d1237d842f383ce6815a01c5bd7565cc4d43331dcb731d58e2","sha512":"e62d61bc298d7157d40ac93188287f506dcbd3929f63c34f094abbe75a6a25c4d6caca52f37d83a9565a5524ced56d722a2e8109f15f3f55d83bbe8b3a6582ae","ssdeep":"","tlshash":"0a41880b6dc0ff606d598df822365e96e42fef72c2f5c60dda0cb092d09a22987ca505","size":2137,"data":"","first_seen":"2025-08-11T16:38:13.741734Z","last_seen":"2026-08-23T16:01:42.92282Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"47528a3860612c6b540934a4597f032b","sha1":"646fe8dfbdd2d8423b470870438917beeb5e171b","sha256":"392cc138a8a4a91c9f745bb00b26335ac66d7739dc38f579356f580e1b382476","sha512":"161306b313d179be9a697363b4e7587725ef306236c1611563768f6000208989e8e412f483a37993ca4e447ad18cc39447473262e35905e4e0da62669cb14aa3","ssdeep":"","tlshash":"e9413af03b05951015e78f5ebcec530e4c476f4de9e461847f0ca65a209a662bc7287d","size":2074,"data":"","first_seen":"2025-08-11T16:38:13.744321Z","last_seen":"2026-08-23T16:01:42.925313Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"55ae843ae4446a2707f2c4d7122523fd","sha1":"28cb184259726a89a32b5e3355449d73ec6f2b64","sha256":"80ec84b80e02119ce6ee1f2447b73d7e5c036387029090b6d1232be73a1ab30c","sha512":"1ed99f40b73fb10027733f1134677498b83f809e5c36a782c99dac3a1c90895ed42f0c1d96b6731bd38032f3453e04de3417664ceee813cddb18b8d48cedb351","ssdeep":"","tlshash":"cf41d8a46600b4e75f4f47a2726a5314fb6e6c4c1c2c1067636880b27c732ac2c1be62","size":2074,"data":"","first_seen":"2025-08-11T16:38:13.746723Z","last_seen":"2026-08-23T16:01:42.927869Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffcdf9bf062ad1080462c37f49c7ea8c","sha1":"54a7f269c3d0495eee1a13bfd0671faa1c8c03cb","sha256":"15f522ff885e9de30c261a75893439eef9de2f22ac9a52abc69bc0b6c8624f8c","sha512":"cff4a2ebdb7f88ae0e75ff2951ebb3a535e0c7a4d0cd49c5db084b5f35921ed435bbd9adfa5fb3b11e4de51c95be3f374bf6291856b795a9ace3c08897a2cda8","ssdeep":"","tlshash":"e841c9b65540e99bee8a46c9753d2f31bb2e8c0c1c4ca0065214c125aca737b3c6bd82","size":2139,"data":"","first_seen":"2025-08-11T16:38:13.748893Z","last_seen":"2026-08-23T16:01:42.931133Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d496d66be21d1a644f6a18f78c5ff4fa","sha1":"94e012e6b0ec2881810fc2f9f0afe469be5b3d26","sha256":"e7dcbd81970b4dda5067a81ab9c51b4bf9384bdfa7cb51a02d2d21930957aa2c","sha512":"d78b976c5269292cf93bd7fc64cee1a15bb28b46b34de35919d38ec34464431da8f5b9b2fb2438327ec68cfa840726a90faa6825df5953f4ae164e76872472ac","ssdeep":"","tlshash":"b5410fa9a10cfc8fff9dccce5a7c4cb6288dc4a991c5959e5524c67a00404b7b5a32cb","size":2350,"data":"","first_seen":"2025-08-11T16:38:13.751432Z","last_seen":"2026-08-23T16:01:42.934946Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fbc8380ef43d1cad35637f2a4e082f1","sha1":"8d441d390d8320e6ec98e151c65c91c68f925e0e","sha256":"f52dd0ae176cfc6ad1dfaa038473082ec74d7d2c2bb65a89314a8bb41e61fcf7","sha512":"513f2c4f91e85f31633c291e80f30d69d7bfdfe0fd1606b57e38bb93be9a649d600d6f037188d82dc55ced385ecc4401e54549eac82bf321df97c3d45bc9eb30","ssdeep":"","tlshash":"6741b47a5400fd4fd5b90e8a393f1db132cd585408a2c96e2561c902ae858f7baf398e","size":2205,"data":"","first_seen":"2025-08-11T16:38:13.753886Z","last_seen":"2026-08-23T16:01:42.937522Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c6a6d2f095af103be8a0ed9105bf4c2","sha1":"33edff24ca69e9cf3372894138b3a53c257d0772","sha256":"ce3c794dfbe02a2aac65ad34671c0b2ff86712f6068a73e2cb627977e2a8e79b","sha512":"be1e2e6a4eaeca57e0161518265d8da51da593cc8a170c9a4a2b2fb3e9408af70a895383d61fd95b814dedf965fb1383d59732a3caee47bf86384b3563d63be8","ssdeep":"","tlshash":"0f4109756401fc4b9dba0f563a3f1e207adc48980d9581af1158cc436cd10fbbab7944","size":2169,"data":"","first_seen":"2025-08-11T16:38:13.757243Z","last_seen":"2026-08-23T16:01:42.939248Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b2f1f6da15deabb8463631470909b18","sha1":"7c1576d19487d512135f08c55dacb62e5f3d79ad","sha256":"26c73f00a44c7d189953cfdd3738edffabe708a1515b981fb813011e0571b264","sha512":"48f572f629870f56c7f64dbeb9a5dc2ea0ad43073507da03997ad332fde14666c0add320467e1d71732de89b2b57c7ed0fab734afa01f08a272dca444b842721","ssdeep":"","tlshash":"234107643000fc9fe89d4f88773e1e24aa0e4c4c08a9a06d0190c1536de62b679a3a4e","size":2179,"data":"","first_seen":"2025-08-11T16:38:13.759466Z","last_seen":"2026-08-23T16:01:42.940892Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"38b1dc2c2310f8e285ad9300fcc7b9c9","sha1":"168ad8a68b21b37512e0c65942798c69264d382d","sha256":"c2f9df0708448e10e014e6ff9c21be82ed372106a0bec8647ead4dd0a3566bfa","sha512":"419d5d9f3e321c667d0cf7ec39f30010a77dabd9e742fc43a76c6f2937bea25223561819e882b10fb679aab1015f28a4e00e227e267149c47f49fba3b890da3e","ssdeep":"","tlshash":"4d41847d5805ed4a84b80f1d7a3f3c51489d58fa02f6e69e45a9c85394a10b2fae2888","size":2205,"data":"","first_seen":"2025-08-11T16:38:13.764662Z","last_seen":"2026-08-23T16:01:42.942066Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8da23b3d1bae82a4b7d4077ac03ef2d","sha1":"7fae26d2f225ac8cb9d6807e33e5aaaddee3d3aa","sha256":"0eb8570e86e93f5da8ccaf3ffb321b39c71ca6a6ac4f16c49fa6f6c8fe6c95d6","sha512":"9c65f528dcb03f7f07968cc63124ce88420643e905547f11d5461885df1953ab733b1fb0b9aa3bac5ac7f3cc23495969d21858a568400851cd64abf8abb58703","ssdeep":"","tlshash":"444110f61085fd1fd0d4cc4b2bbe3c7318adc45481c5956e94a9c86751d10b7f6a2ac7","size":2330,"data":"","first_seen":"2025-08-11T16:38:13.766873Z","last_seen":"2026-08-23T16:01:42.943419Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"30700113dbd63f692b519bfe6576506b","sha1":"efccd56eb0bd9d576aef84fe2c756bb8e6c19fec","sha256":"0e736f2d2b49ffeb5bffc7793895bfffb85c0e33388e139aaa65ccf613e372e8","sha512":"5252cd9f9f85a5541d31f49728bc6285d2dc50b7276030e64a4d0ac480407be137a076e6c26d0901cc242f7536c9dc488d134e5d211b7f3410292c061d6170e1","ssdeep":"","tlshash":"f341ac351404fd8ff59d8ccf2b7d6d36049dc89941d0b0de9665ca6b44810b3baa768b","size":2438,"data":"","first_seen":"2025-08-11T16:38:13.769519Z","last_seen":"2026-08-23T16:01:42.947703Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"de50a58c9cbc69927dc1c839834e9524","sha1":"f57c10928c502819cc829f6cd1aeb63b868d0aa8","sha256":"4ae28ec3b2a0094b7b44c435c8d8e5246f36ad0c138d320dd984e6502d0ccb16","sha512":"a4b396198ae0410f6ba9d7110efd80a771dc265b4bd34d14071fb34521fe271c82e11c0f969ff75eae6598d4af9e34313941d75d1917b5432675a3be40e4cde4","ssdeep":"","tlshash":"e041d7a12d0bedab8ced1d23b93f2c616c918b7552f2cedc08c4c84771c41389ed6206","size":2164,"data":"","first_seen":"2025-08-11T16:38:13.77191Z","last_seen":"2026-08-23T16:01:42.949043Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0681c4cc111479e1cb86963d2e8cdfa3","sha1":"ffd4de3275e61310a1f61726957ce21b2292dfea","sha256":"30df8940cbc252ba49d4fdf9a29c1a61d59ad37ac0af3321992c6270f675792d","sha512":"89babeaf26488364d051a24d7854b22d210e5a313346e161c7a9068d0a8a42f5665dc5f8a41115022353cf5506dbb1111eda6321026a68553416cbe087e4ab91","ssdeep":"","tlshash":"874175b46816efdbe898ac8b663e2c641cc9881a40e189bd81a1dd57b0c45736ff71c9","size":2238,"data":"","first_seen":"2025-08-11T16:38:13.775947Z","last_seen":"2026-08-23T16:01:42.950644Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e2fb7f343b661ecbdbe9fe7251a74e","sha1":"dd5d1c40315216f37632dd5071fa86c41188ea7a","sha256":"fd52f69d348b5cfc19efa590209792011f68c88f54f360725e5dd826c02916f2","sha512":"7f4c80d6f9959175af321881b7c99ed5161e02a20ccda43229a42f611319f249ad3cb5bacd45787ce331bb6f4da30ddd7d41373a1e5ccfdf6f43b4b93215cb76","ssdeep":"","tlshash":"2441a4b50809feafdcdc4d2ab63f7c221c99857752a1d99d90e1c95350c407aaff318a","size":2232,"data":"","first_seen":"2025-08-11T16:38:13.779202Z","last_seen":"2026-08-23T16:01:42.953641Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"655bdd227155118f6a6f143726b4ba02","sha1":"0e5277d9a5d17b1e82e99a4a3c37baa53e1b12e1","sha256":"fd8d5c721967db3ca4d3b30a545a1675deaf25b673680c74e475c2ae2ff733c6","sha512":"90767f90587b20a018a4e54c41790aba544ebbf4d9e67ea2477743cc11ca03d09e9a78cfce1d4d5ab89ebb0a6a69525a0bb48dee480f0d48a66f7dbd500a28a5","ssdeep":"","tlshash":"c941b7650806ffafcc9d0d6a773fac721c95c56a51a1f9dd80d4c54720c007aaef314a","size":2237,"data":"","first_seen":"2025-08-11T16:38:13.781329Z","last_seen":"2026-08-23T16:01:42.95694Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbf008988a315f3a329d31cb322692af","sha1":"c192630358466dd116051d9bd4e5887ab65eb956","sha256":"72cc4d564b1fb68e3baeb5ee78b02426752f9fb6c4a1da2e4bc9f550f00bf6de","sha512":"2c9c25c8abfa010d1e465381023c078da615e054972afc9a9bde776be86d014b098ab686a6c47642ff6404b8c8efac25ed3fd77407799fe3572c6ddcec027c98","ssdeep":"","tlshash":"c541a4625905fe5fccec0c3bbb3f2c722c15c56a11a2ddad90c4c98b60c00ba6ea314a","size":2237,"data":"","first_seen":"2025-08-11T16:38:13.783432Z","last_seen":"2026-08-23T16:01:42.959663Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1717b72ad07bbe2fe8339616808d4f6","sha1":"3a6df846af54e241dd06ef2e6d5426e42b0b9e2e","sha256":"96c73aa3e75bda9eeb51234bb06eed6f551348badec439792d323ad9c11ca124","sha512":"96ccaad0f9a7efb74468b93bbad1b0643254b22bd9a87fda9503dd18638c319919a6b4d4e4f914c73dac817f057901f5f5d54201aa0a46e88d4cfe1e2e08ca4e","ssdeep":"","tlshash":"444171765a00fc0fc4ad8c6a5b7f2cb36849c41941d199cec6a5e91b54d10ff7ef2a0a","size":2272,"data":"","first_seen":"2025-08-11T16:38:13.785438Z","last_seen":"2026-08-23T16:01:42.961519Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"43b2f4a367175fada056d0c5bccb01a7","sha1":"4c1f313081781d4545bbd69df01af5f1b38e0c3d","sha256":"9a7f4acf15d3566e222f992a73328566517ca7a8ceebf231bc91f835a5aaf78e","sha512":"5eefd86b469b91c27eecd056165a506530c9d8a035df98fc9555bda76b00c5716610061fa3aa0bb0a2303546ec83c9aa25a96e68610604f6aa500f8bceea90c8","ssdeep":"","tlshash":"fe41b96f640cee4fc4e7de45273f2d3918ef519dc5d55a7e90c1c452a1190b7be62408","size":2214,"data":"","first_seen":"2025-08-11T16:38:13.788274Z","last_seen":"2026-08-23T16:01:42.963244Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f8f5805a964c22bbbbbc6580fbc07aa","sha1":"aa0a22ad51ab767efbc80542e1a65e4becd2f635","sha256":"80d8e3bd6cc4682e75c6816ad4a68883b10c5cfaa0b2a3434580e0f4381c5402","sha512":"87071ee6c869afb7aea8a56e50e7e40d21b7d547a45b051dacdf1c8bf539b68320bce16b1b84daa7cf4ce23b524833f72b0399a95d68eafe48a095495205afa2","ssdeep":"","tlshash":"6841b72fa564ed0fc5f1ce092b3f1c39008a969ac5da52bd54d0c416e6180b3be72586","size":2227,"data":"","first_seen":"2025-08-11T16:38:13.790295Z","last_seen":"2026-08-23T16:01:42.964835Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8094029885af9bf7887bd076bec0c44a","sha1":"b13e56640b5c9433f34efed5a24e37e4ff508dda","sha256":"a70af8c7df16497476898a51f339e1ee1b5669743b86f4363e93175aaf529399","sha512":"2904bf100519663cbf3ede06b053b88c19e35efd501bfc985714b86f58f87d1b8738fc179ad8f10ead7e865a59ae2c748268317e08620b8476f19ea259d641f4","ssdeep":"","tlshash":"a441b72fa6a4ee0fcaf5cf053b3f5c2904c9168dc0ca526e5490c552a4594f3ba71459","size":2227,"data":"","first_seen":"2025-08-11T16:38:13.792074Z","last_seen":"2026-08-23T16:01:42.966829Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8e31ab3250625c8d0a06e7536e3efbe","sha1":"412101bc37f4394334d9635e59b30472adb52688","sha256":"a8ac17ad2b2ea4947aead465492d0971b608c7c11f667fd774715242d27cd0d2","sha512":"118bbf7f70119cc430c8830ce4f8e4a9bf1510ee1f5157a0b4baada2af86dd532b5b0671193da6aec9d86291353c635806ad76f30e6ad85b21fe7d6185cf39cb","ssdeep":"","tlshash":"6141a46fa554ee1fcab5ce45373f1c6b04c96689c2ca82ae5490c527b0580f3beb2449","size":2227,"data":"","first_seen":"2025-08-11T16:38:13.793783Z","last_seen":"2026-08-23T16:01:42.968875Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cbea9ac376f4dd4b0a277eb72f74ad5","sha1":"dce54f19256ec3b66320be5fc0dabebf06c0cf41","sha256":"2fb66c63e5e0e85b1afe15e72f814831c438a199c3c4a4c124c2670eeea735cb","sha512":"02852c1da470c47b0535078bb379564c4aff7756cda7f54d74b9eea639e451737494f29f0030b833f88ffa71d9faebe5a3945b9cbdd5e8110f1aea5784b1e1ee","ssdeep":"","tlshash":"6241b55ea668ee0fc9f4ce593b3f2c2b048902c9c1d9d2bd85d4c85270580b3beb244e","size":2227,"data":"","first_seen":"2025-08-11T16:38:13.795474Z","last_seen":"2026-08-23T16:01:42.970856Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b91dda4bec7785f43d31a54f18857e70","sha1":"cf19a4cd726dac64f05302519d4e527893750045","sha256":"52e120bbbe590e205313baec6e8b474ff086cd3e3682ac677f384292e66fb729","sha512":"733d3355fa282bc5bfb39cb73678d3a55c540f4e76ddf0b8004810a428aedad19addbf67ca0bda8b91180201ee744c4764fe4ebdc772a7b8f7f81afb9a4ee321","ssdeep":"","tlshash":"2f41822f9228fe0fc1a4cd4a3b3f6cb7549d4111c1da462d61a4c0a675840b37eb398f","size":2248,"data":"","first_seen":"2025-08-11T16:38:13.79687Z","last_seen":"2026-08-23T16:01:42.972765Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac2c227c6abdbdfa957a636de5df81d6","sha1":"258c51eb1d0c106f528530e42887fbbf28a1cdc7","sha256":"2a32e9c27eef44805510f9367d7a0efa4686c4d15b81f0c4f42626905655d2da","sha512":"f62a289a1a6b06f8ecffcbe680c724b9dbc9a3f85ddcec02bb369b4c3a3480b9191c2ccd6753c0f4fd18c9c6cf449482fe5b687c2607e09abc8116199c922279","ssdeep":"","tlshash":"594132652008fb9fe48a4c8e7f7c5cb3145d8619c2d6749d9051c61a3a844b37eb738f","size":2308,"data":"","first_seen":"2025-08-11T16:38:13.798675Z","last_seen":"2026-08-23T16:01:42.974742Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6063d7317c41809d9d6e13586b1417bf","sha1":"0f926d4e8e37c0b7daa7066d32e4a7d9567c7261","sha256":"3d731f53e251daaf6502f7e6e8a2d01214a5234feb8738612416533f664d083c","sha512":"52641b25a0d81e13f8c3f042cddefe00b2f403ad974eceb474cc1c522f58fa65c5cd4adf4eb74c3313a8a944556e1ff382b5e5a6d2213e368dbf27d252224849","ssdeep":"","tlshash":"08410c6a1204fa5ff59e4e8f3b7d1c77459dc689c29828ad6410c66e2140477fef32ca","size":2302,"data":"","first_seen":"2025-08-11T16:38:13.800533Z","last_seen":"2026-08-23T16:01:42.977407Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ff301e53cb9e4d6c7657f3e66902d2c","sha1":"cb9efdfac3b7905c49c794b420c7abb568b25788","sha256":"fd3d129a23995eb29db616ad5bc3da55aeb8bb6c6c57ce2852ccc67f39f04d59","sha512":"f60e0d20f9ce47f6ede918fa2dc82d4cc33ae41d537945b1b72e6e5bbe1893dfec8eec6f8e37da34a045e97013b026516c84f9d74c1fee077d6bff78cd77665c","ssdeep":"","tlshash":"f4412096124afa2ff49a4dce363d2c73114dc118c3d9942d58a9c96a368103bbfe31cb","size":2314,"data":"","first_seen":"2025-08-11T16:38:13.802583Z","last_seen":"2026-08-23T16:01:42.979751Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5238f3e7a590451004510c2b1830c314","sha1":"7994023c24ca30b4675ce842f0dd6ab96934165a","sha256":"5589270aad3679b66b759a624c5486327af8426b3ff2e53f0acfb53cd416be01","sha512":"4c8c78cea366d5bf74b611b58fc0fe4b0042bb2be1ad7d9ded480f2c45445470b3c6003d9db2af378e27d0adbadc0739bc8570655686bf3685a5970abedea00c","ssdeep":"","tlshash":"4721ac6a5245ee3ed5684d4f323c5cb3948c8107c1960c3e4290eb5a72c04377f47a87","size":1223,"data":"","first_seen":"2025-08-11T16:38:13.805413Z","last_seen":"2026-08-23T16:01:42.982109Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4f36863def11f698133f5ec82e3169c","sha1":"d9f1f4fc1f92aca6341d6d1ecbf0f59539675421","sha256":"52ac72b7e4cb1c2df867c14f25af49bc00f0678b7d6125822d69d3f12f094ca3","sha512":"e79a6b17a29564be5f426d5fe5d1ffc91691aa429daf02057a1ba63f65909e0059c44954adae006c951b1d5c4efc66fcb5493b0560bb9e123efaf744a1d79b5b","ssdeep":"768:9KQquVY0VkEwuyfUud1uUuYUuJUujMUuGkgkMk0kNkckJvsQJfv/8Pz:ouZRrgBaLMtsg9DKz6sr","tlshash":"e243b77a6404fa4ed4c58e8e6a3f2c36180d856a42d699bd80e4cd1756840b7bff39ca","size":59448,"data":"","first_seen":"2025-08-11T16:38:13.80748Z","last_seen":"2026-08-23T16:01:42.984585Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3397624c64a1f2f69f253237222087b1","sha1":"65e053fd86af06c5aa0526903fa49f6c0dbd619a","sha256":"1e1e74468c41ed77396b037a92731a6c42ef84be93c5e0a70a2f2d9e429ba1ff","sha512":"788b620606972c3fde58b120d4e496884ce53706591d7cf59a7a01836bdfdd531441348dba0d327060da0a41a1b0c8ebb653ab5d3bdb26a98bc4e3e6ad1666b5","ssdeep":"","tlshash":"d4414e0badc1ff506ca5cdf912325d96e06fffb2c2b9c70dd90cb496d099125478a506","size":2172,"data":"","first_seen":"2025-08-11T16:38:13.809851Z","last_seen":"2026-08-23T16:01:42.987247Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7bc542b3ce63fb2d79250c80cfe63b61","sha1":"458fff416f05cce419e79e9ce4743c956fb53343","sha256":"a8ae5b611ec0111a0d62b9a629cfae2e586183e87e5522fc772f94e3ee9756a5","sha512":"ea5d3659e981a4926e60147fb4b2ed92afd1b2960e7f5f33b86b76bb2b5ce1dd9e8f5313ba365054af3fda2e507bee8185e818fa01334a663da7f70d2d450ed4","ssdeep":"","tlshash":"de416e0badc0ff506ca5cdf912326d96e06ffbb2c2f9d70dd90cb496d0a9125438a50a","size":2172,"data":"","first_seen":"2025-08-11T16:38:13.812178Z","last_seen":"2026-08-23T16:01:42.989234Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5b8eb86a24bbf2a52b0c48fe60fd8e7","sha1":"a6dd0a6f8ae1ba70958be37abdf33adeb3ba8c1f","sha256":"8802cd3f242ca19208465cc3c021263b91479a5247c362010fd5fcde86ff6777","sha512":"db3e02212c242ba3681855e2022ce20f16c0d10454bc68ca5abfa138fc5f9f7f0583de1e0b3a5652c8a14a11536a7fd53183330a9f79ba111a0713cd47c30b1e","ssdeep":"","tlshash":"97417e0badc0ff606c65cdf912326d96e06fffb2c2b9d70dd90cb496e099129478a506","size":2175,"data":"","first_seen":"2025-08-11T16:38:13.814184Z","last_seen":"2026-08-23T16:01:42.991198Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bef1af8d0c702e486d06c7c8952c4148","sha1":"a079d0d888866a3461c93b2de060d7c1f096af2f","sha256":"40010887ad972746760ddf9e99e9fe419bf58f541f6cc071342257dc2b252a6b","sha512":"14836f796d264f5fbf7b236fb15e842cb2d888ecd6d138ccef40ba6177d51e698129fd30b7f10bc712155f180b0d360de831d3e78030c24a657205fe9145e113","ssdeep":"","tlshash":"34f0b40b9dd1ff106c65cdfa12325d82d06ffb71d2b9c70ed908f09590aa115439e906","size":484,"data":"","first_seen":"2025-08-11T16:38:13.816875Z","last_seen":"2026-08-23T16:01:42.993169Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5817e097158709b2039ea60b4020c631","sha1":"5678f86ef36c4a75ccdc930ab4d05c89d7be978c","sha256":"92f3a32d5368604703b9e903440b1cc4aef5cb2f00e069f3732026b2ef8c17bb","sha512":"09706b50388b26967b9b7b82a542a9e4d43901a81e4df6de06c07f4a25ad276d36bf9b24081d2175bcd26f1eb934d07aad88315d821f60cb40c428c24afab382","ssdeep":"","tlshash":"b461ffe52354a68c89d7cc1eef21a858930f9cb5bab766908d4ecb64109f8d4f507c24","size":3298,"data":"","first_seen":"2025-08-11T16:38:13.819267Z","last_seen":"2026-08-23T16:01:42.995349Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"49ba72b64c3352dc062d5add5ef23092","sha1":"5ff6af3be80aaf9884e845b92f8917fd3035dfd6","sha256":"952b52d1656a1cf31417cbe9403815307b7a166a10696bef8565519d0c5ebe1b","sha512":"1aaebc77d244c3680e4ac832fffc903c1abe2107965bebb8e2111728ea94fa3e11d880639ee6b8c4478d6d8881baa34db4ef80ec43126b40937b1c4447ebcf6d","ssdeep":"","tlshash":"cd800470c1400c15403100331434100503dc400400011044535f71d451535454d35dc5","size":35,"data":"","first_seen":"2025-08-11T16:38:13.821664Z","last_seen":"2026-08-23T16:01:42.997049Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c99f662d97a451ac6feb99cc594c2ced","sha1":"777e57490bc6a06c635a5c85bc6506324fb9830a","sha256":"9af3bf3511ec3322b050abad8dedabaeb3598ae23d7171381961e6e2ab2fbdff","sha512":"6acf4afd20e7a8c27d78a1cc39e319ea236bf8de95dc5a8c815a9de979138cb835484bad375f57773e35f5db1389756b476064a4842b83860371bee547441095","ssdeep":"","tlshash":"9b5100e57a58e2c0e60b8be4ec394c65a15b28f6bfe8379b4181dbfa73311d48448c90","size":2471,"data":"","first_seen":"2025-08-11T16:38:13.82755Z","last_seen":"2026-08-23T16:01:42.999157Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5e6cba9e76957f7842875f2d9743675","sha1":"ad1951612c401b35cd8912499ffc14b87a352dc3","sha256":"7da4fccf7d1a0f8fbd152440d6e470b5a279e731906bb8cb49dcff73d0ea98df","sha512":"63ad87310cb032cfc90e2be3d1bcda320245a543e558ece4b69344c2c451e15a2d03fac69b52f04fffef962b970e405e63c1f1658ed2096f9f26fff0a0ee37a4","ssdeep":"384:ch4xncidkYvmMmBMFPzVyLi9UlX09UlM09Ulh19UlHC9UlVNfttS:RaidYMFPRAi9UlX09UlM09Ulh19UlHCd","tlshash":"2b5244faa206d95cf89a7e4a44bebc3d704e91a74587deb9c2d8dc20054747d7b82ec0","size":14462,"data":"","first_seen":"2025-08-11T16:38:13.830147Z","last_seen":"2026-08-23T16:01:43.000917Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f8803a82994685eda7b3ed0a78fe392","sha1":"5c6185e24b87e21b84a3d726da307f3cef631f3a","sha256":"0186881bc92f1157c0419b871ca06cec0ec27391bee89745cf24d147f543c9ae","sha512":"3e293884e015feb5c79c3e09c5c3ff76768ce576d1efbd3a79b0b9fab6aaa5fd36002ed111efbb5077b393d3cb5f03c2663dcae08a149dbea66a950b4a0ccf4d","ssdeep":"","tlshash":"ab51b3a7be16ed09dbc6ae09583f7cf060cdc29782d2a85fa488dd284457d3059f1616","size":2741,"data":"","first_seen":"2025-08-11T16:38:13.832931Z","last_seen":"2026-08-23T16:01:43.002759Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"36e4141fc852dab6e49aeaa80fb299ba","sha1":"331ebd46d5a53ea0c72661d9422176d76cebeba3","sha256":"e2687344a526a2a25864e0dd8732758493774990544e6a5b2009fd0a809e29c0","sha512":"15958c05579aac5ddd9fbe3563b0bde7fa7d30d33c3e1ba93619f007080c9b6e9f0d42966eea7f95f76727651b209445073d09342f60724fc248e281bd437174","ssdeep":"","tlshash":"e7800470c0405c15c03140731434130d017d400d0000071053505744501110f5505ddd","size":34,"data":"","first_seen":"2023-12-29T21:14:23Z","last_seen":"2026-08-23T16:01:43.004758Z","times_seen":2743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"94132ac6b5e065b0d1fc131dcdb27187","sha1":"fe40097ba157d305ba47000d182bbdb6e53a4497","sha256":"b2c120ebf2275d59f6e4e917c34541ec63e0cd32b8eda30d2623bbb863beca93","sha512":"c38c695b79d5a5dba0124da6c48c1acea6660e32ce2e5be0be21f53437c721915607131898b749d3ffe5645920de29efaaddbfee7305ee0b42bb045a116fd914","ssdeep":"","tlshash":"0a119c0f1dc0ff49bc908de916396c72901fea72c2f5d61cc50ce852d184033738a845","size":878,"data":"","first_seen":"2025-08-11T16:38:13.836323Z","last_seen":"2026-08-23T16:01:43.005519Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3356052549154b6e96d04b394d88fcbc","sha1":"30bf2c26258be2dd5c60d13b12ed4b288932cf3d","sha256":"d75f89f685e2b5c017dbb9a6ce4771e1baf694d254124eb2a1c6617eab15e53c","sha512":"9c1c74539208ff92bce3d5b8a89b420b8a9ce19d585e47da74ff4297cf8ed9f1dd716c95ca3c1a6cf1527057e2637a569b0e4e79b19a3c71ae813c2f01ba6c01","ssdeep":"","tlshash":"92c080dc210b2df4c9e7162187bf520cd00523129c5e4120792f3385df60547d700c44","size":190,"data":"","first_seen":"2026-07-12T13:55:20.442331Z","last_seen":"2026-08-23T16:01:43.007731Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e3a10c7657430541ee7b2d778769047","sha1":"ce8f34c55d56b32900da1d3c138f297ee3b4e3e9","sha256":"46691f894966ef1de2381e6cdd88eceba7ff831d583c25ba9529fe5aea063be7","sha512":"852190fed6065f902392a5583fe09ad00346530ce4e293c7bde6764f933c86ba8de960a8bd16eff2c74179abe710d6b6aaadc124ad01f945bbc6da1041f8cca2","ssdeep":"","tlshash":"43c0928934f326a964b36538077b27582293469f318ca837bffdc610af5860b5d6a248","size":148,"data":"","first_seen":"2026-07-09T04:44:09.304167Z","last_seen":"2026-08-23T16:01:43.009871Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-08-23T18:36:14.401591Z","times_seen":300654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-23T18:36:14.402134Z","times_seen":264306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"12347d552552b7eb8f1aaf47a5774b81","sha1":"4701684cb61e83493e14555659e2cd07ae9aba3b","sha256":"63b85d3cc0ccb498e52cf8dc76db5119713a85031ef4a8e99edd01e403cb08f4","sha512":"a0b95f6914bf92922a13db3f81f5612e2a360e0b3bb0f6ffabbe41623a044d662e27a216d788399cad99c8ec18c5f98f481e602d672de5b3b97d5da8ec930e4c","ssdeep":"","tlshash":"6b41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2083,"data":"","first_seen":"2026-05-25T17:49:28.102585Z","last_seen":"2026-08-23T18:36:14.4027Z","times_seen":22340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"93b21911a509171778fe6d264ada2465","sha1":"f04c74033bd6398dfcd46bf2e3653fbfde72031b","sha256":"24bcc49b9623c425054542e7e4d0b8035e13ca0ed636e2a6f8bc7da88022a342","sha512":"a77e4c2d468ef21f08c5f437726f1740ab59d2cf97e3073cf52ee51c7bc33931aa9c39ca0895c6706605efa3f005213f20ea2be44e2b6cf2fa7c52362a7024c5","ssdeep":"1536:/Uy3s9llENMyFXHg1hI1hAPYGVu9TLkZUBlYEGjb6QKOa8:5lUe9GVuN4ZCGEGfX","tlshash":"3aa3d7640868a8769893d447deb9ff3e9cf805790bc89a6dbcbac75c01ec6510e9f413","size":106050,"data":"","first_seen":"2025-08-11T16:38:13.761925Z","last_seen":"2026-08-23T16:01:43.013806Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8501e99db1c76b62dea75ad32747a129","sha1":"791537ba64bbd81ed1644b015c4830d897182fb8","sha256":"25289f89e8785a11e468135cfa545b64462e90a61e62ee0bf9fe2dce0898016a","sha512":"d34b3b6f94043e080daf7804d7305efc1bade1433a80d4c6c547ab1325aceda8235ceea8bd99062a7737401ff5d767d46e4d24a972bfa88e9c6b197947041f77","ssdeep":"","tlshash":"7b1135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1032,"data":"","first_seen":"2026-05-25T17:49:28.106733Z","last_seen":"2026-08-23T18:36:14.404627Z","times_seen":22310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-23T18:36:14.4051Z","times_seen":262415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a68a761b5070cb3dba6a0d08c60793d8","sha1":"e0e0f7c73e3940ee43a620f151e61150ac7f83c7","sha256":"c404c6d6479e84a27bcd19cd79228c84c73793caee8b69b397d94d40d983066b","sha512":"e7d4db3eb4ac63bdbb86d39cdfcdc570f18bc6fc601150e8e8a1972c7e3755a7e5922cb8c8d81162ad54ee35f0cd8a7f0f593ea525df30a5bdbfacabc9762473","ssdeep":"","tlshash":"4df0c90c0744388c9c0e9c9dc6a0a5619b8c8277bb423456f82a094eb9e3beb4830043","size":539,"data":"","first_seen":"2025-07-31T17:31:43.20518Z","last_seen":"2026-08-23T16:01:43.017384Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-23T18:36:14.407221Z","times_seen":259081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fabbc0364f1f7eaab731c12e410978c6","sha1":"7abf8afd59d07801bbda7e2d7f6818576587f1df","sha256":"e4bdb59c77568cfade71ae382ae7b97862cb4edcaf0dd2c1fe90f438e62f1f5f","sha512":"6f458d26e66e8366ea12b678fe1fe7284d89b50b2498cdcf33a66ebd4fc5b6e66460edbcedc2c4ea8c0f96d19a9b191532632a5e2e3f6d2b5f9acc6d72b99806","ssdeep":"","tlshash":"cea02223c228c823003800a000a33002e00803208803a00c830a020830e802bfe8c08b","size":63,"data":"","first_seen":"2024-08-19T23:27:20.830797Z","last_seen":"2026-08-23T16:01:43.02009Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/pixel.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc306990cc600795a1e0f370f7d57cd4","sha1":"466c3249b307ae898cc387a7e6787593ab51ba2b","sha256":"3953126a6f6936d1edf140aab420fb68d6ef32ed01cac1dd23f14fc178ac4f59","sha512":"618be3e328291d4483531e4a641106685aab29a321aaa9fddb7bad30b3c31187ca36efa6c833cbca3b9f4634bf8289931f578acacaa7298215b7b43819ec0089","ssdeep":"","tlshash":"f1d02b6b5d019639235680be94b4d539209d207855219807d18a8cad24fcee15c9d9a0","size":275,"data":"","first_seen":"2025-10-23T04:16:54.668354Z","last_seen":"2026-08-23T16:01:42.860117Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.hsforms.net/forms/embed/v2.js","fqdn":"js.hsforms.net","domain":"hsforms.net","tld":"net"},"ip":{"addr":"104.16.5.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc537b140e9ab24db424ed9cd1cf6734","sha1":"702eea30310e4d3655fe82c14a63ef6859ed40fe","sha256":"e4d5393c1089f5176ddcaac4755b2a1d4ba688882edf2217520b8062ae210db0","sha512":"16357bfe31ec2bfdedb4863569de9d6ff923f62ef9299fcaf9662fbf93dc3b79916fd1123b778ea008b603542a1114398a3e82e433ff1904b159d5193262517e","ssdeep":"6144:SS85fuNlKtr75C++7jnQV1nPnZOyiWO/hULKTEAFnrOSqJSIUI9SEefdLBFBVLon:SJ5tn5WWO7FnrO/JHd9hefdLBFzUwg","tlshash":"e8d45cc53185f0215bb302b660bf601af33d1d29780d8990f765e9da38e985a917bfbc","size":606241,"data":"","first_seen":"2026-08-18T11:02:05.698641Z","last_seen":"2026-08-23T18:33:32.171441Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"eval","is_inline":false,"md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","size":1,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-23T18:36:14.442084Z","times_seen":140514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/1dd3208c-e155c594ab2e0c3d.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e02d1cd6e751a1bbb4ff2a368dd1b66e","sha1":"982a9cbcc9403fb90fbd80cefd2c6a90b0df1829","sha256":"359deca4a1b7762a78f0fd35eafb5f746e88a2e793056c0e1e2b819d83f8c0fa","sha512":"9fae60504ebf4d09c7953b6cfc82ac7436cf75d76492ade590c6a5d156270b7804989b07deafa6ba040423e433af9edcb3654728e5c6862d82fa66d8b182a5d8","ssdeep":"1536:9VjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:Vzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"6af3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172835,"data":"","first_seen":"2025-02-25T09:52:04.538021Z","last_seen":"2026-08-23T16:01:42.857139Z","times_seen":982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/7664-7ac50ee128122d88.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3008a8b6fa952707b991dedb6e3a9433","sha1":"5e492337eccd9e961ce44778ed583a3481492999","sha256":"a611b1eae65df5ed3de36620f52bbfc3da68b958284c37b792eae731e066349a","sha512":"09620af246c1d30afab4f5ca2250bc08201476b16a356252dc905f82221c6f3efddd14709249e11c7d3bbfc8ae40c413bc227620392e15e5a2e972d18b15db8f","ssdeep":"192:THDV/lkgo/9Cp8kINE1pd+4y0bzW+1AOlq:ggSCMNARbCSAOlq","tlshash":"9ef151e6b2f2b52583c36161083f0459f43eda94768f826de164d8d6bcbc488d43bf29","size":7708,"data":"","first_seen":"2025-10-23T04:16:54.387829Z","last_seen":"2026-08-23T16:01:42.805038Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/3848-70958eefff98a5a4.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86a014e0ded33c49392d40c728613fb","sha1":"6811f7686cdd6518f03a70d579507aa5dfb8a493","sha256":"086995014bd22d5f55a465ff9ccf53386beb79c3db5ee1c299b47c0a2dbbb080","sha512":"e156325bd8fedf2911f282a6e2b3e7457b6e1a9114b3820c2d126d67a0cacf91044ef312c32cd74356c6eba255236f033765dd7cdf480ecc28971f78dc36c29c","ssdeep":"192:i91AEwIzrICoQE7gP5xVyDN3MUtp4jtZVNuseRFEM3W:KAEwIzrICdRByZ3MUkjb19Mm","tlshash":"7d42519cf4d2bedcf96b98c4a67f540db21f1b44de0a08b4f9b8680468451ac7653bcd","size":13012,"data":"","first_seen":"2025-10-23T04:16:54.440747Z","last_seen":"2026-08-23T16:01:42.865235Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/zmIq31voDSWI8AGyiRJe9t7MieBaDmAxmnftlUj7E58.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d601534c559fb0cc2f6015a6978a7d50","sha1":"6e2550f921267508905c29a80589a8be75b03f7e","sha256":"ce622adf5be80d2588f001b289125ef6decc89e05a0e60319a77ed9548fb139f","sha512":"4f02363996fbbf5950977e019fd23544394a8b51f3c6410c0feca817b33a1a1262bebe7b238b0d45d967bc49159dd5f6b83c76888a66aac0c1ba884309250ec9","ssdeep":"1536:jn1ZsieoP9oqsRFhyoXoumqlVS46ZLBUX2MtbnGj1E:7lonRFsoXoubMpLg2MOE","tlshash":"a34318dfb2c367351ae271e2009b600a52bba9559c981d5fbd01e6f41e31d87b02bf39","size":59229,"data":"","first_seen":"2025-07-26T08:13:23.535773Z","last_seen":"2026-08-23T16:01:42.835558Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/error-17280e138e94e511.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1518cad6b8e2833ddcc5dc93f32d7c6","sha1":"a1a2ff2b29a1fa065dba54039ea0c310c6ce5e98","sha256":"91f50578ec245e81772dfc954f059fa723454d646f729f2f17030a4f5827177c","sha512":"c935c159b80d2335e002e1da9b3682bbfa5229e99785b657c1709a50341bae046773b76bd847af3d04a2bcbaf9e2dd8ed20b9f4bd401cf161002776f528c2d37","ssdeep":"","tlshash":"cc016f45b485fe5ca95f0cd4217f940e706a2e5dad0d88a464f82c521c550ae7653fcd","size":818,"data":"","first_seen":"2025-10-23T04:16:54.868321Z","last_seen":"2026-08-23T16:01:42.851311Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/gtm.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ceb969f3c1878eebc332b58b8d24db","sha1":"2b367e1765d5f03a5c8c3e08b7327079e475b391","sha256":"90529f2bb962860258050afbc1296e76481768a527d5e9f601c67e9470362b69","sha512":"f9a1f0d4954658a7f9d91eb08253661dcf263a3331ab6ce33b862298f707b4145768e65c389f5a3407e78fc643ee78da642407320eb251651ef87e3cba270e9d","ssdeep":"3072:mNnjweWKA8xwym6o6A07J58JGXbrunAxVOrqtcRWaWU5Fjt2YwTYyDgA:BgvmZHnUOq9aWU5Fh2nTYyDv","tlshash":"fc6418cd73d6b42283a2a478503f018bb57b69e2f44cc899f185d8d42e74aaa4177f7c","size":313322,"data":"","first_seen":"2025-10-23T04:16:55.263222Z","last_seen":"2026-08-23T16:01:42.841531Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","size":273837,"data":"","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-23T18:45:45.908029Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetPopup-CQY73JnA.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb52e13ba095a4670b882d5ab5a1419d","sha1":"64e30a6fffd630a161e882efaeeee903da6d998b","sha256":"ce799ae4d1840cb0439286105a4229f103b40b4bfa4f30f9b934febd2be277db","sha512":"171397ced412550ffef09a98466d71d56299d38637bbbe299c5f9684641190289f799cb95838dda42b5f3d887c6d124462f32c5dfb982c6ce0da0baba63c6037","ssdeep":"96:Hqcey1R4J3Yjc/R5HZMi9KeGvxSkEti3iy/ZNhnpLgz+:HYyOYw/R5HZUeEEcJNB","tlshash":"dfc1a6553182b03eb55fb5087a28e1abf239d4c9d91ba63d9207ec4432d8cc28dd779c","size":5720,"data":"","first_seen":"2026-08-06T02:21:22.641204Z","last_seen":"2026-08-23T16:01:42.852682Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/817-a15fea2970392d77.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f06675485df8ef99cde78648177f9d13","sha1":"e2dd0fa9dbb8efd218b34df426ec917f62b8319c","sha256":"3064c45f3be0adb7e48cb84ded1b9b79369c0d23c0f9829cf4974948127a060f","sha512":"234e2dbb5f05de376f0d28b704c650b9dcadcec6be8ed615ed6728057ec989349f055bca0daaf9b0096b8f51cc30e2c8be34b92bdfdeb547d4cb7e8aa75f1cd5","ssdeep":"768:jx493Q/ytBbyfZmIJ7YRnKOx7FW4THj1c5lybL:297tlyf8RnK6FdalybL","tlshash":"041309b771d1f8e253db44a0843b100ef27a1d7a241ea144b3b5ccd5f6a05ada1a3f7a","size":42674,"data":"","first_seen":"2025-10-23T04:16:55.171015Z","last_seen":"2026-08-23T16:01:42.888624Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-23T18:45:45.874584Z","times_seen":8697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/main-app-420abd7798f6e175.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d45661648b73d31fc3b9b073b1abb11","sha1":"33d7b68d474e2996c2b4673207fc6e183f027802","sha256":"8306894da00cb9ab79e7d9336398c5f3ec3f7c361fc125a5b26c1bf2a5982b2b","sha512":"ad20bd27c3fd60aec13fd7d60831590d3385a77da654dbbabea8ca421cbcb07fa294e164727d7453d93adccc00a7337aa25a6fe6ac81a0c99f133634136545fc","ssdeep":"","tlshash":"b8f05e9a264d742f28336a60fdd7ac2e285e8139287758506a05ddb12c33a6cd2f0c38","size":473,"data":"","first_seen":"2025-03-05T05:44:32.012927Z","last_seen":"2026-08-23T16:01:42.857855Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/5066-dc91238c78146afa.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"82ebb068f617ee76f29b552aa5fe3b09","sha1":"1d8f228f5e09561f97846c7e18bec9a1c6249719","sha256":"fa4a58493d76d7e16f33c4235d8853c954360cb9d62c53cab0f979ad336e0c6c","sha512":"a5963f74f2d5d89c9f3fc485b64ae692cb743faaf54730322ff01082236267e8fa5f4f0eaa48040a54fe99c7ec8dfa01850fc8b1ae2a771e3ef0ef063a3fd869","ssdeep":"384:VxbjGQF3eJiUIzA2DrzSzIipwZsE9bfY49QksvGFC0TVfkcVZy19ibEhjvNEg5OH:KGeCzpkWGSbfRsvIJTpkcyIWZEgtjI","tlshash":"f903fbe537c170f2d7df016a907b520af33e6998240a4410a135ac993575ee9d2f3f6e","size":41015,"data":"","first_seen":"2025-10-23T04:16:55.473442Z","last_seen":"2026-08-23T16:01:42.811546Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/layout-df5ca0ab215fe9d8.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43cf68420bb63cae37b095ea7e4676d","sha1":"3e9e41a4a62644e1a7d64ac1408852245277dd57","sha256":"92fba156eaccbe0c0793b175356758f1db492a969b312a1dc1178c2e0a9448af","sha512":"d5a40fa0952f418bc72bd07d92e2da7099a4816c8649de53080cbe1a3b28dcf612c374f7111dfb48ecf68e2cc3ffd67d63e87113e747936363b75116221a411c","ssdeep":"192:E538LPEnxrHpHAFkkn6nFq5Nhypx3QcUDYF6kZAmJF9M+xrzVv8Q16:ERdnxTyikn6FqfiBQc79AmJMkmN","tlshash":"fc529bdda3d4bedcb8674c99ff6b980c710f66649e1b0860696dea50180b1d8f513fc8","size":13433,"data":"","first_seen":"2025-10-23T04:16:54.71733Z","last_seen":"2026-08-23T16:01:42.813921Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-23T18:39:33.975294Z","times_seen":424639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"eval","is_inline":false,"md5":"d7b37ba06585ad3a3f332c916355d2dd","sha1":"db15d054b76f5d92874fca3329577debae24909c","sha256":"9876e6c3bb9a0ef2f26230bef2cc4aaf39cda00717098f4ffcca5940a9f4edb1","sha512":"59f91ccd7e7ec6dbc25bef078b8824d43a4790ba0573ff79abb20f4073208bdd96599a20deff0025bf1dec8731a3262c823f7db7826ae0498214308cbe0cb4e8","ssdeep":"1536:b/ZsieoPHo2sRFtyoXoumqlVS46ZLBUX2MtbJGj1w:VPoDRFwoXoubMpLg2Msw","tlshash":"8543f5def2c36b351ae261f2009b200a52bba555dc981d5fbd01a6f41e31d87b02bf39","size":59186,"data":"","first_seen":"2026-08-23T16:01:43.021723Z","last_seen":"2026-08-23T16:01:43.021723Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","size":16032,"data":"","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-23T18:45:45.896953Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/webpack-7858b7ed950ab990.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd84b37eb9286f35cd5c453592ed4aef","sha1":"596f0f56f403c4927979b5d5120b65ce0e4b6853","sha256":"0a2aaf4d203e7902f697cf38443772b209a3bb7f6ea99094931fa0836208086a","sha512":"860d56fdf92787364d126d50c03e3aaee0c99fcca069b8599404c46acdaa4377d712067d5f14df249ce08e90edd9f1b8835882674562f9010819def8939664b8","ssdeep":"96:BJ1hwBE9qkHAiR5mm0EE4G7lPEhyGVADcVNsSI2LDzN7LDBCMRJ+fP6pZxL:BtP9XAiPT0EE4G7ayGzQ0Dh5CM/+fyLl","tlshash":"adb1d7ee72a8f475179354a0443fe566f63e2472681ed0a0da1ed4f5bc30c998223fa8","size":5260,"data":"","first_seen":"2025-10-23T04:16:55.051652Z","last_seen":"2026-08-23T16:01:42.831362Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/1129-a2bea5e33d0056a2.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"67da267f4f706a151cd24d9d48c86994","sha1":"250a3c9850014671141cf432dd7f7c3c6a84d228","sha256":"cb4aceaf6714fb746f6ce56c6f8250feddb93c6949f333e51aca18cbc7f5e8bc","sha512":"0f7f3447827419da6b69f39fdfb8020b13c11571857417b112d3c4b67bf7b84c300bf75aad39d3b10405bc2298377a272b1f3752d1dbe1b05d580370e8ee44f0","ssdeep":"96:QU+AHjyPFLstc/fRtplrPqJ7MXcF0T+1bsHVtz+sObHcTGyccn4ED:zmCc3pcJ7MkA+1bYcHcTGsH","tlshash":"6491b8ad30e3b41ae7574183212a1118537a0a7c384c887efab49c5b94f65d893d3eed","size":4268,"data":"","first_seen":"2025-10-23T04:16:56.649517Z","last_seen":"2026-08-23T16:01:43.025975Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/cast_sender(1).js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"226a9abc9e14c4b8b452223d2b4631e7","sha1":"89a9eb890755c16982d8571d9cdfe42726a4c7b7","sha256":"7f6bfc238b9bddfabbfc20464944718e0246088517cf84a2d2aa2bc8c1e380a5","sha512":"d4faec7997f057be268e080f3703a7ceadf473cbe1681a70ddc10c309da6630df1d5513ce4bc9c862e65699dd7e891dba614b004bf1a0b2b57feb1b218cb838e","ssdeep":"768:TYrRwoA88niJYbfJdjRNP5qF1BgOKpgFSavh1ZhViey6pkFlprFfVvQH9qVHLiho:TYrj/8cOnRaBgpgDQey6pkFlprFfVvQi","tlshash":"f7231b0c6971623db2d3e8f020bf00a97e7a787db444846e7988dce2597568d852eff4","size":48673,"data":"","first_seen":"2025-07-21T20:04:55.585785Z","last_seen":"2026-08-23T16:01:42.867964Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/www-embed-player.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c435b0d8c14cb9cc92035b2640fefca","sha1":"4a616d1d58d4c28ddce2156d48687f8af12c4703","sha256":"2de42ed8515ceaa100dea97e5f05b589bbaba4a5b85f5f031948e33cf0388dbf","sha512":"f00714b093bb3f62ade3ffd204c3e1a5f7b7c091ae022dcf6d5bdc2633cfe3fbb241fe67735b30e84f113da5ee6b98aefffcd6bf0990b28651279e19791b5e19","ssdeep":"3072:Rwu7Y4GAKgmVUjdkKiqTC61zeV+dbNNJStK7aAgBUrj3Fv:E4ZAUZkKiqT/1aVGhNmK7aA1v","tlshash":"01744bcdb692706352a3a5b4803f110bb13a78aab80cc9b8f195d5d92d7495d8337f3e","size":355825,"data":"","first_seen":"2025-07-30T18:59:23.341194Z","last_seen":"2026-08-23T16:01:42.870166Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/4657-0ee3002512d36841.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"12751b59074e6d9271f47c7d08174d29","sha1":"88ac97f44887e50f9b2f8f620799973e5bd03690","sha256":"b9f07c6dca9a08f9ccc5f7f0246e1358b1a89d96a92459d3b0cffbdaccad62fb","sha512":"6e27f81cb9241c2433d6e609a2a21210c622e761a9b2aaac1a4b1eb5edef2d1b80b638461f0ef27f5e684e69d73991429a19f2ceafdd2d0fa565f267394140be","ssdeep":"1536:Y+80MBRsZTUcK28zvgei3U9z7biRG4LrZdZe+Po2fg98DQ8yAHJHMnCHX8ktZlLR:M1BRNcK2Ovgei3Gz7biE4LVre+Po2fg2","tlshash":"ad93d8c9b6d2f02613a721b1443f000bf27e9a58644d44a8f2a4d8e67cb59cdd57bfb8","size":91829,"data":"","first_seen":"2025-10-23T04:16:55.446975Z","last_seen":"2026-08-23T16:01:42.881967Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/6649-482119baad8450e1.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33c21aae84a9047e3286b2b6b291f1d","sha1":"d811b51c48d3573a6176442824455e99e60852e7","sha256":"943eb28d1f32a0b0eee768b2d637c799b3dc39082b97299306cd1315ea34a511","sha512":"c5e8cbd8166c8c3221d70163ace4268c410cda6c074ba05496920ba6bd8f916b38326a19ffd73b325f6ff6dbd682dcf3558fe7abefc88ecbabe83a8bef21f27f","ssdeep":"1536:liuViTK9nRiEUXC49hYgaMb6B4/LJdx/NOrI8MYLI7puHoWg5LDrsmYJ9MBV/NZK:aV9hv4qb6UvL3/67X","tlshash":"3be3f8aa73517535c3db5199c06b0a41f33b29d8240a402cb67dedcb256458ab2fbf3e","size":143956,"data":"","first_seen":"2025-10-23T04:16:54.405883Z","last_seen":"2026-08-23T16:01:42.853396Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/pixel(1).html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"edb377166ae87d3b43280c1c4b9f2f5e","sha1":"28086acf1174dcc9e25390853e17bd6cea201172","sha256":"1577556bbd53f68f49f1a812559cf3dbeda741572ae835706b4b19868178229b","sha512":"19341ad01b905f9f2a30a6aa2376f9fb9fe1d029f96e0fb4210f6e9ee4828ca7b4c49807b8200eb5790fc8a3db50b88d63a5c048aea546bd9cb7a21727fd6626","ssdeep":"","tlshash":"add02b2b9d05aa39234680be94b4d139748d207856219807d18accad24f8ee15c9d9a0","size":277,"data":"","first_seen":"2025-10-23T04:16:54.630728Z","last_seen":"2026-08-23T16:01:42.843227Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/cast_sender.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","size":4272,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-23T18:51:45.058297Z","times_seen":12077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/ad_status.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fa71744db23d0f8df9cce6719defcb7","sha1":"e4be9b7136697942a036f97cf26ebaf703ad2067","sha256":"eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9","sha512":"17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f","ssdeep":"","tlshash":"9e8000823a082223e8a28088830ae2202c82080002220808c028000020808c380088e2","size":29,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-08-23T16:01:42.798427Z","times_seen":5106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/4251-809de9329659cd65.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"501ecbffbd8d64c220825484592cb3fa","sha1":"c3d23379df351792b7a4c9e498bc6b4b09404938","sha256":"fd3771178cb0f44f97eaf1dec4d91e36e0188c6c6eeebe6c195bbddf2dbacfa2","sha512":"2f2d222b750013eea95d7665f37cc01237120148e37c6febf6f3e4bd5583c0a01a8e6a839a99a36259f1d3c603d03391a7e4364b5a8eb57b08fb1cc9029cb599","ssdeep":"1536:l5sszYQCV7mxBlxvHvm8f4K56WPlgCJ/Ruidzvpcwnv5CXiA6wwQ:lOIXg1QtBTPLQ","tlshash":"ce9309dab22175b692eb529b82a9c111b3f55844b449c43cb1f88cdb546c99c03feff8","size":90517,"data":"","first_seen":"2025-10-23T04:16:55.499613Z","last_seen":"2026-08-23T16:01:42.874732Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/297-6d76bae9b6e1ddd1.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"672529b44ce7835ba12a9cd965c10243","sha1":"fe31dd4beb4a2a6261bbd5eddd4f5e0e726dbc21","sha256":"0786d452a90f5299a126bb72ee4101b59b61fec75cfa67d1a0177cd44cb0fd3b","sha512":"30a685f3733445e1f971b2c8af02a442a8e20fbc419b137e256b373696dbf2cca700760df9991c7ce3ab370f0bd44fd7fc5a363a12733d8d3fd9aeba1a3437e0","ssdeep":"384:PyWF9waIrt8J2nHrGD2ON7OKJCEnqAOGWougqMOmsRf5/bb2wsOU7S6OwTTTOJ6/:DIRSDfNCcCEnqpGWiqNxRx/bb2wt0Svk","tlshash":"5682b6ffb3f571c4d10e8ff098bab82d763b35f97a08c29486999568b5191c8a046ed0","size":19207,"data":"","first_seen":"2025-10-23T04:16:54.500236Z","last_seen":"2026-08-23T16:01:42.862864Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/5925-4166237618ab52e9.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f005e9303ffd0bc3af0d8bfa5241b52c","sha1":"6d3c108425d01cc374b586a1a95261fab90d0e32","sha256":"37f82f138746f163d45b89aed6ce6b8b7fdc308fbf49789fbfbae70bf4a113f9","sha512":"ec0009d6433337be84c15bf612910cbcd618715b2c0200d0dc09cac4b0006680d7079c786a5cc8ba3740f4ba0870baa56d136835bd45c8664432e4c94b42571c","ssdeep":"384:AkNfk9vLE8Ovw45ZvvtILugpcq+Dk8ICCKFltXkbn17S/Wli6rBc:XNfQvgXRPScq+D/+bn17S/Wc6dc","tlshash":"dee21e95f1a6eeace97b88d5942fc40cb11e7f4cce0ec8a4f8b868241d445d47a52bcd","size":31496,"data":"","first_seen":"2025-10-23T04:16:54.689029Z","last_seen":"2026-08-23T16:01:42.883759Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/869-a6ea874d4dd8aa27.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"75a5b759e0483f0c11720cb6f65d612d","sha1":"06e7db606639a36e180ce65713c82d186f5c1a3f","sha256":"6ae827d08904c561d71aff235bfedf7a2314cee32c1164a15969225478920a7e","sha512":"bd5c9c591dc0a20e4a67c2e2447c5d3149016fa67bf7070cf5a8c220ab096561c783758e30cc8999b013bfa33ffaf799ef42e9dc42f9674a6e00f255a335bc58","ssdeep":"192:ylmgoJsQ0mR92QJpMDTmFMmmNocVXM2oa/K7iCByx0:yQbEm72QrU+MTRG+K7fi0","tlshash":"5022544536a976e57acf249580ff980ff36f560c242c10b4e36098ba586e06e70b7fd9","size":10892,"data":"","first_seen":"2025-10-23T04:16:54.239254Z","last_seen":"2026-08-23T16:01:42.808971Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/4922-1d859531bf4b2f28.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b8e7f0c0a9735f427206db6ea63f8ea","sha1":"2ee15eefe4c9d113b90d13da5f5e390008bd9e20","sha256":"f89e0c00d945ffe04d6dbe81112e18840510b8432218b4bdc8e913c11e7ba6ed","sha512":"36a45b91dc5bfdf677dfd3fc347890ff76ad2bfe81788bf29df19c3a682232e600bad9a2f2ea0d385896f3cb3ef49273a064c5e298c1371fb04ca3ec06960dff","ssdeep":"768:OHMxk+tCyRg1igpDcw9Q6FOdtt+QfcIzYV9:OcO31igpTdOdbPe9","tlshash":"a523f889326b72974bde40c56471030ae2349e992448640dfeb47fe7d496ec9a2fbf31","size":48623,"data":"","first_seen":"2025-10-23T04:16:55.428204Z","last_seen":"2026-08-23T16:01:42.822415Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/osano.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d5614f84339af2ee1286f9ac8a0a576","sha1":"e851674b8e3f7a3c12c8dcb06095e8b8d657656c","sha256":"9d95ed773270abaa1a2ed1375453e04142b5758d4003ed02559c9361dd985c93","sha512":"c563780327e7efed1c4db752a4d6dcc4182896a11cfd8692723d9301a0b2521dd3c217a9be5ebd5ac556160bc48c7d128755ce4162a44547f2c1f1dfadaf142e","ssdeep":"3072:l6X4enSf+6zrk9bym39gTJsacCkXgTp93BFha/qmOmLpRZ+2zxvp+Tt:l44KSfZqCkXW9xra/qmOmLpRM2ztYh","tlshash":"b83408e536daf5b102e256e9843b0609f339ae45342dd090f364dec42c2864fa676f3e","size":249706,"data":"","first_seen":"2025-10-23T04:16:55.733456Z","last_seen":"2026-08-23T16:01:43.028618Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/base.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"adb2e26748e4a4cdf753747237c0cf1b","sha1":"7a83031ec3e847c85593f6a66579a443adcd552b","sha256":"0e5d3960f50650a379ffeaa336c579c77cfc850351742b0b095b867bac349636","sha512":"91e16de09a56cd575589ff2a6b3b69d5c5209f431225e00a11db7aad6b8fa6e1e5b3462bcd4646eac84198abe64e65716dce5f145560dfc48cee4b4237d53477","ssdeep":"24576:6um6dQk6fuIxCeLWIZeeKDaC6LL0AMtJUO0w0oFKkCGoSI1e7398r:6uDp6xlCg4AEUO0w0oFKkLN8r","tlshash":"adc54bcc72d2b45072a3f1f8453f2106723b6598948c861cb25adaeb6c75c19a337fb9","size":2609054,"data":"","first_seen":"2025-07-30T13:06:15.962046Z","last_seen":"2026-08-23T16:01:43.031575Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/page-5e0921c3dc577898.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6336154248ebad2baa89abd7dd08257f","sha1":"f2b4cce7177f84edd2b6a4b19f9a7b7dc1404c1b","sha256":"085c226b8c0b322fefe5c03ea72b73986cb7cf923cea8ad608bda0a213cdc1c7","sha512":"6693f91615ff2fd40eebbf0091e3a55e4b45dc50ee962b23c553a1f6a1655cafdb6e63d66804da797460a089166bebd2e893d6a6ef1358d14f4f905888d0c4e0","ssdeep":"","tlshash":"59312a4a171db55f59276ea4ff879c0e641e912098274e206164edf238233a8f2f096d","size":1722,"data":"","first_seen":"2025-10-23T04:16:54.250513Z","last_seen":"2026-08-23T16:01:42.845159Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/remote.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5710dad6271a9165f17934e672bb8ac4","sha1":"27883df4ccfa9ad3c1521b0b3ba3a7c0825b366b","sha256":"4fd00d63c35ce4eba964b2a5d4c85d890834d48043b1e4662188040cdb037a67","sha512":"b9637479157698f04228540de9af16dab54b6e693a31c194676d40403e833c59adc35872d3daa68502e6aa2a9d5c027616ce08078170f0bfbc62b4c5769bc2ae","ssdeep":"3072:2+/9NZ+j47HULFoCFp2PkPa3IBG44BLn3qsZP0xPljNN9ntsmpNw:2S9Oj47HULFZz2Pt3IBG44BLn3qsZP0o","tlshash":"5bc3c398b551b02132a3f4f9093f200a56372ae8a49c426c760aece35c7dd4e5677ff9","size":123727,"data":"","first_seen":"2025-07-30T13:06:15.598584Z","last_seen":"2026-08-23T16:01:42.878162Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/2537-3779df9e937deae4.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ac0f608a4d3dca1eee3524f51e9be1e","sha1":"9f3593272a80f47e3923e9a8cf70f524979b53a7","sha256":"07b4d957abfbd249488873368e9a599dc098d054c5c008ed902147d71184d52c","sha512":"12c3c67994096d3a8445b0c7f881d7d1fab0bb33cbc8344a49c7665158327bbd1661c61012bca3318df405b9a2b0202ddc1080ee5348dd5eb2b2d17b28af3dd6","ssdeep":"192:BxDmwvqp7QG1EQwFJQzCUYbDtClg1e1rfGam1+BdbjYPs/i+MTMVdLoUJn61UYyg:G4qlQGaQB/YXSTGaj6HTMAlSzz4","tlshash":"6a220ab5b6c8fc75528e09d4843b430a76592b35551e2840f3ee8ce76378e8750a2fd9","size":10115,"data":"","first_seen":"2025-10-23T04:16:54.832448Z","last_seen":"2026-08-23T16:01:42.848499Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetMessengerInput-5TvOyhoI.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"469cb26497f223941f83e97ea051b63d","sha1":"e25a4e79aea4cb70c71c9567f7d76dbebe32eece","sha256":"ba3a20ab7246a50296e74c08f299dedca678ccc6f584a3912164ebd4976f5b34","sha512":"8ba83e44fd223b98bf62bc3edeb1ca6e0885fe77b238c327d9d9b8929e4ea8c943ae8ad0022d1d9acf10d167a39f97636fe844b33e85e2e4d9aa01122734292b","ssdeep":"1536:7riWM4+61NnmIgNEN3OFdVlwZMHKKO/3xfNA6j9Oxof99vW33XCwtEctfP/gv1NL:9CSZZ3xRzkOXt","tlshash":"24635d943300743da13f8276a12f911af2379194908fc02cb92eddd939b5dd46aefa79","size":68000,"data":"","first_seen":"2026-08-06T02:21:22.683595Z","last_seen":"2026-08-23T16:01:42.830737Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/js.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"24521e6f62178b5c63360a9eea77e736","sha1":"5fcb20f45cdbfb41683fd199db499e237b635a21","sha256":"facf500cbd0ae22813ec6277d11b49168c178fba5d1d72a43d9b7d7fd556f775","sha512":"40bd0e270f9008101b6a9b7413916efda118a1b9f3efcd42bc77be01c871065ad06d3ed62b8a0c6db69f30d0d6128be95e4746af5700b2172f0c48cf92958c59","ssdeep":"3072:MQNjExl/A4mwrcxZL/LGa6n07oHn5wdK8Oe/11LMHyqsS0cnGRWMukOFQt2Wc+LS:aGgcxZX7etZsSXLMukOFu2F+e2qZm24W","tlshash":"118419ce73d670269396f478503f018ba57b29a2f45cc899b189cce42e74a9a0177f7c","size":404093,"data":"","first_seen":"2025-10-23T04:16:55.073891Z","last_seen":"2026-08-23T16:01:42.880088Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/embed.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"63ec9f60ea2990a0f7295611655033fb","sha1":"af5abfac40f0a6f7172eb72ae7bdbd515284edff","sha256":"6ee9b581c1f6b5ac31c4d6cd69741652b058375541fae0858b49454af19f03b3","sha512":"fd33c7fe72ac6d06e8667f99e68afc4356b2cbac799a5ee54ae11c364ba4d9cacac7ca1dcac28b7b55a0b28dbd74f95f96391c82f6e7eaa0fc66ee6ef3999535","ssdeep":"384:tYRgyq+e8v2cAKicdwxEUbWu9u0fdypHBZgnj/XNtaKyVlf/MFbbXRZWeUpppJFu:V+1v22UEUbpu0EjGh1olX2H6pA","tlshash":"f5e2e54e37e0e4249565e1ea1c0b2104633b94dd18e0a3ac763eeefa2d75d18b43af75","size":33660,"data":"","first_seen":"2025-07-30T18:59:23.411352Z","last_seen":"2026-08-23T16:01:42.816021Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/1528-5b651a682d288e05.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1f83ea442d663ba1a2bff64a22bb366","sha1":"79ebd3ccaff49ff6883d210cd058907ecef0b184","sha256":"4801b0509070fd32cd961ed98adb19cbfb2db9be9d6ed635c570dcf04abb3abf","sha512":"2645df41656f2903d6a8d944e7d27d27ae971858a93c53ef41b3172bce9b84d5fa51ccc67bcec4bc0f7fd5ce2a95d96f4bc585762940e5ccdea2d6ff092bb89a","ssdeep":"1536:hDwxIGExqHgis8TdluER6mmNOKg5UF/v7:V4XT4On5Az","tlshash":"84c3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124309,"data":"","first_seen":"2025-10-23T04:16:55.065374Z","last_seen":"2026-08-23T16:01:42.872338Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cmp.osano.com/AzZXI3TYiFWNB5yus/2016b368-eac0-4852-b001-c9fd9aaaaf77/osano.js","fqdn":"cmp.osano.com","domain":"osano.com","tld":"com"},"ip":{"addr":"65.9.62.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2953b5d8c6ffe8947f6bdfb70a354e17","sha1":"1e1310edd721836b0aa7887cfcab76fcfdc25ba9","sha256":"e977a7351ef1a24a660ead7a49ba9fbbfe12935e33ea88489e0d81a16fd2f789","sha512":"e6f92c2007ea26c8d39ed005ec302b8db108912ad810b87dd07ce7de1571534c3a04492e319b1afdc3273f444939ff92258dbb548eeab3aa6999a9f083f41c7d","ssdeep":"3072:l6X4enSf+6zrk9bym39gTJsacCkXgTpt3BFha/qmOmLpRZ+2zxvp+Qh:l44KSfZqCkXWtxra/qmOmLpRM2ztYc","tlshash":"e73408a536daf5b112e356e9843b0509f33aae45342dd090f364dec42c2864fa676f3e","size":251069,"data":"","first_seen":"2026-07-12T13:55:20.312279Z","last_seen":"2026-08-23T16:01:42.838802Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/v2.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"80607b84e3b9d672ed7f1466a1b2ca71","sha1":"44403d53a65c7ea1bcde4147d841a48a6b1bd93d","sha256":"1366e96a7671f1154739cefb2ca6718a43787e6d388cf88c750b5607ba1a566f","sha512":"89423810fda14a357fe4df19b7c72c1c2b1f71e7a9958ca11408043155720a794dcec813828a3a4b2ab81f08377601fa98b6644203c0cf9a402f1c327a84cb14","ssdeep":"6144:sc8Kndt5yaj2/VynaBNyqo0yiZmMbtLKOplF5lp88qmCBMxrueGd6BtZunVqL:ISdbqokZmWFzp8Nm9IeGd6BmVqL","tlshash":"d5c45cc53181f1215bb301b660bf600bb33d5d29780d8990e665edda38e995ea13bfbc","size":581713,"data":"","first_seen":"2025-07-29T03:17:52.01102Z","last_seen":"2026-08-23T16:01:43.033863Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Error: Google tag G-M47C6SYY2F loaded before Consent Mode update. Please review and resolve Google Consent Mode sequencing.","filename":"https://ai.midnight-pd.org/index_files/osano.js.download","line_number":2,"column_number":205398},{"level":"warn","text":"Error: Google tag G-M47C6SYY2F loaded before Consent Mode update. Please review and resolve Google Consent Mode sequencing.","filename":"https://cmp.osano.com/AzZXI3TYiFWNB5yus/2016b368-eac0-4852-b001-c9fd9aaaaf77/osano.js","line_number":2,"column_number":205397},{"level":"warn","text":"[Smartsupp] Could not play message sound.The play method is not allowed by the user agent or the platform in the current context, possibly because the user denied permission.","filename":"https://widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","line_number":2,"column_number":13426}]},"http":[{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/ad_status.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.626Z","timestamp":1787500839626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/ad_status.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29,"size_decoded":248,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"1fa71744db23d0f8df9cce6719defcb7","sha1":"e4be9b7136697942a036f97cf26ebaf703ad2067","sha256":"eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9","sha512":"17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f","ssdeep":"","tlshash":"9e8000823a082223e8a28088830ae2202c82080002220808c028000020808c380088e2","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-08-23T16:01:42.798427Z","times_seen":5106,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/_next/static/css/cf389df63b1d0248.css?dpl=dpl_4jWMjBT1rHL9DiRCa4Gxba4iJVij","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:40.703Z","timestamp":1787500840703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /_next/static/css/cf389df63b1d0248.css?dpl=dpl_4jWMjBT1rHL9DiRCa4Gxba4iJVij HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/sounds/blackberry2.mp3","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:01:04.339Z","timestamp":1787500864339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/sounds/blackberry2.mp3 HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 23 Aug 2026 16:01:04 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 9135\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: \"69085dc8-23af\"\r\nexpires: Fri, 01 Jan 2027 12:08:38 GMT\r\nlast-modified: Mon, 03 Nov 2025 07:46:16 GMT\r\nx-77-nzt: k0NfsPmBMrwZOWNLk31YRbo94PERnVj0V/6KEUJnOH5tpV/zBIJLcpo688Q98pIvMSiGQbM\r\nx-77-nzt-ray: fdb541234a9bb6db65198b6a23242a14\r\nx-77-cache: HIT\r\nx-77-age: 19905009\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-9134/9135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":9135,"size_decoded":9694,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"50af11b446ad42a4c3501aa519e44455","sha1":"0cf0cb1c4ed614fe8969fb6cbaa0d630e8fd6574","sha256":"713a1269cbe341333f360d6767939d33c6dc04754fe9028b34deb6ac59e0fc1a","sha512":"d6c1e1acaf6f1af5d3c61e1ce7143cdcd387ee9f407d67ec5ffa4bce37cd7c4abd77f720a615bd9f1face7c9ddedf41e6bca53e483bf5a26bb52cb64451e6c74","ssdeep":"192:xrTX1A8Vcw60SNVGNVhxPI+BGCSt6RfrIJC0Yf0vJxoV9Ik7DrxTP+FlZxU:lcgSNVkpBGp8frIJC2joLN7BOU","tlshash":"20123986d324918dfca68fff22afea35c556562fceb0cc15415a5788847f1027bba12c","first_seen":"2023-04-09T23:40:20Z","last_seen":"2026-08-23T16:01:42.801078Z","times_seen":824,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/7664-7ac50ee128122d88.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.614Z","timestamp":1787500838614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/7664-7ac50ee128122d88.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7708\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7708,"size_decoded":7929,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (7708), with no line terminators","md5":"3008a8b6fa952707b991dedb6e3a9433","sha1":"5e492337eccd9e961ce44778ed583a3481492999","sha256":"a611b1eae65df5ed3de36620f52bbfc3da68b958284c37b792eae731e066349a","sha512":"09620af246c1d30afab4f5ca2250bc08201476b16a356252dc905f82221c6f3efddd14709249e11c7d3bbfc8ae40c413bc227620392e15e5a2e972d18b15db8f","ssdeep":"192:THDV/lkgo/9Cp8kINE1pd+4y0bzW+1AOlq:ggSCMNARbCSAOlq","tlshash":"9ef151e6b2f2b52583c36161083f0459f43eda94768f826de164d8d6bcbc488d43bf29","first_seen":"2025-10-23T04:16:54.387829Z","last_seen":"2026-08-23T16:01:42.805038Z","times_seen":9,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/869-a6ea874d4dd8aa27.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.615Z","timestamp":1787500838615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/869-a6ea874d4dd8aa27.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10892\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10892,"size_decoded":11114,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (5777)","md5":"75a5b759e0483f0c11720cb6f65d612d","sha1":"06e7db606639a36e180ce65713c82d186f5c1a3f","sha256":"6ae827d08904c561d71aff235bfedf7a2314cee32c1164a15969225478920a7e","sha512":"bd5c9c591dc0a20e4a67c2e2447c5d3149016fa67bf7070cf5a8c220ab096561c783758e30cc8999b013bfa33ffaf799ef42e9dc42f9674a6e00f255a335bc58","ssdeep":"192:ylmgoJsQ0mR92QJpMDTmFMmmNocVXM2oa/K7iCByx0:yQbEm72QrU+MTRG+K7fi0","tlshash":"5022544536a976e57acf249580ff980ff36f560c242c10b4e36098ba586e06e70b7fd9","first_seen":"2025-10-23T04:16:54.239254Z","last_seen":"2026-08-23T16:01:42.808971Z","times_seen":9,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/5066-dc91238c78146afa.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.616Z","timestamp":1787500838616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/5066-dc91238c78146afa.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41015\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41015,"size_decoded":41237,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (41015), with no line terminators","md5":"82ebb068f617ee76f29b552aa5fe3b09","sha1":"1d8f228f5e09561f97846c7e18bec9a1c6249719","sha256":"fa4a58493d76d7e16f33c4235d8853c954360cb9d62c53cab0f979ad336e0c6c","sha512":"a5963f74f2d5d89c9f3fc485b64ae692cb743faaf54730322ff01082236267e8fa5f4f0eaa48040a54fe99c7ec8dfa01850fc8b1ae2a771e3ef0ef063a3fd869","ssdeep":"384:VxbjGQF3eJiUIzA2DrzSzIipwZsE9bfY49QksvGFC0TVfkcVZy19ibEhjvNEg5OH:KGeCzpkWGSbfRsvIJTpkcyIWZEgtjI","tlshash":"f903fbe537c170f2d7df016a907b520af33e6998240a4410a135ac993575ee9d2f3f6e","first_seen":"2025-10-23T04:16:55.473442Z","last_seen":"2026-08-23T16:01:42.811546Z","times_seen":9,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/layout-df5ca0ab215fe9d8.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.627Z","timestamp":1787500838627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/layout-df5ca0ab215fe9d8.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13433\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13433,"size_decoded":13655,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (13433), with no line terminators","md5":"e43cf68420bb63cae37b095ea7e4676d","sha1":"3e9e41a4a62644e1a7d64ac1408852245277dd57","sha256":"92fba156eaccbe0c0793b175356758f1db492a969b312a1dc1178c2e0a9448af","sha512":"d5a40fa0952f418bc72bd07d92e2da7099a4816c8649de53080cbe1a3b28dcf612c374f7111dfb48ecf68e2cc3ffd67d63e87113e747936363b75116221a411c","ssdeep":"192:E538LPEnxrHpHAFkkn6nFq5Nhypx3QcUDYF6kZAmJF9M+xrzVv8Q16:ERdnxTyikn6FqfiBQc79AmJMkmN","tlshash":"fc529bdda3d4bedcb8674c99ff6b980c710f66649e1b0860696dea50180b1d8f513fc8","first_seen":"2025-10-23T04:16:54.71733Z","last_seen":"2026-08-23T16:01:42.813921Z","times_seen":9,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/embed.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.620Z","timestamp":1787500839620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/embed.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:43:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33660\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33660,"size_decoded":33882,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"63ec9f60ea2990a0f7295611655033fb","sha1":"af5abfac40f0a6f7172eb72ae7bdbd515284edff","sha256":"6ee9b581c1f6b5ac31c4d6cd69741652b058375541fae0858b49454af19f03b3","sha512":"fd33c7fe72ac6d06e8667f99e68afc4356b2cbac799a5ee54ae11c364ba4d9cacac7ca1dcac28b7b55a0b28dbd74f95f96391c82f6e7eaa0fc66ee6ef3999535","ssdeep":"384:tYRgyq+e8v2cAKicdwxEUbWu9u0fdypHBZgnj/XNtaKyVlf/MFbbXRZWeUpppJFu:V+1v22UEUbpu0EjGh1olX2H6pA","tlshash":"f5e2e54e37e0e4249565e1ea1c0b2104633b94dd18e0a3ac763eeefa2d75d18b43af75","first_seen":"2025-07-30T18:59:23.411352Z","last_seen":"2026-08-23T16:01:42.816021Z","times_seen":599,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:42.973Z","timestamp":1787500842973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:00:46 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a7093a4-891\"\r\nexpires: Mon, 03 Aug 2026 13:20:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: kxVwNtx4Th4MTyLG+qIF7QAW2viuz1CtadgfdplbSwiFTo8fjNoxQKbkQNbDHrBymmWC/rw\r\nx-77-nzt-ray: fdb541234a9bb6db53198b6af3f06f10\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 53\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"9f40d3a11c02b8dc0a1627186b6f2cd4","sha1":"705146cfc3126ce2d8ec54d6a5743c79aa0a91e4","sha256":"9f5c54c74d4c6345396c9b2e3a04393f90570c1eb949b2c9bf09a251e65487f1","sha512":"a2a090de8960f7292b52268ef5e5212d6a74b19840794d91c6e222f17e7f0a6b125d577fda4d95701f350b0c8d5c49025f0bf220c8f349ef58996693aad11b1a","ssdeep":"","tlshash":"fb413793c0f80d9317cc652b789585415d90c3c7ac893e0d76ae8a6f6f4cda914e677c","first_seen":"2026-08-03T19:54:11.717069Z","last_seen":"2026-08-23T18:45:45.89331Z","times_seen":601,"resource_available":false,"data":null}},"time_used":3312,"timings":{"blocked":-1,"dns":33,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.123.94.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:46.497Z","timestamp":1787500846497,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ai.midnight-pd.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: FZOJCeKr04O6VHIsMhDJ3Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 23 Aug 2026 16:00:46 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Pveh+ddn7Vo8o+YMYSchZR0KOvQ=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":92,"connect":110,"send":0,"wait":22,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/1129-a2bea5e33d0056a2.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.617Z","timestamp":1787500838617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/1129-a2bea5e33d0056a2.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4268\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4268,"size_decoded":4489,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/4922-1d859531bf4b2f28.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.624Z","timestamp":1787500838624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/4922-1d859531bf4b2f28.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48623\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48623,"size_decoded":48845,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (48623), with no line terminators","md5":"0b8e7f0c0a9735f427206db6ea63f8ea","sha1":"2ee15eefe4c9d113b90d13da5f5e390008bd9e20","sha256":"f89e0c00d945ffe04d6dbe81112e18840510b8432218b4bdc8e913c11e7ba6ed","sha512":"36a45b91dc5bfdf677dfd3fc347890ff76ad2bfe81788bf29df19c3a682232e600bad9a2f2ea0d385896f3cb3ef49273a064c5e298c1371fb04ca3ec06960dff","ssdeep":"768:OHMxk+tCyRg1igpDcw9Q6FOdtt+QfcIzYV9:OcO31igpTdOdbPe9","tlshash":"a523f889326b72974bde40c56471030ae2349e992448640dfeb47fe7d496ec9a2fbf31","first_seen":"2025-10-23T04:16:55.428204Z","last_seen":"2026-08-23T16:01:42.822415Z","times_seen":10,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mid-night-pd.com/_next/static/media/c7f848bed9dd25a3-s.p.woff2","fqdn":"mid-night-pd.com","domain":"mid-night-pd.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.520Z","timestamp":1787500839520,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/c7f848bed9dd25a3-s.p.woff2 HTTP/1.1\r\nHost: mid-night-pd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"mid-night-pd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.smartsuppcdn.com/files/agents/avatars/1081813-HE-57GU7Zz.jpg?size=80","fqdn":"files.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:01:04.407Z","timestamp":1787500864407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1407973393.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"5B:84:E2:8E:E4:CD:36:50:D7:9A:03:32:50:E3:BE:5A:40:C7:EB:0E","sha256":"A4:0D:34:B2:5A:C5:1C:6F:22:AE:61:45:F7:76:55:A2:D0:AF:4E:1C:DF:F6:B6:CC:49:7B:D7:24:0A:E5:CC:1C"}}},"request":{"raw":"GET /files/agents/avatars/1081813-HE-57GU7Zz.jpg?size=80 HTTP/1.1\r\nHost: files.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:01:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3014\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Aug 2027 09:58:41 GMT\r\nlast-modified: Thu, 27 Mar 2025 17:40:31 GMT\r\nx-request-id: 387109a0-9ed9-11f1-b68d-33ffdc82e108\r\nx-version: f92ba74969309ec1d0aac9f4a7614a4c7b350943\r\nx-77-nzt: k1+PxD7fyx+6rvTrmX/HmfA95ZlXrItVKHvD8da8XoaghP2pLJjHla0ynudw8ujsMQ\r\nx-77-nzt-ray: fdb54123a464a76565198b6a125ae31b\r\nage: 24\r\nx-77-cache: HIT\r\nx-77-age: 21719\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":3014,"size_decoded":3601,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 80x80, components 3","md5":"cad24700cbae7ddc2d6fd5c47e6c2b99","sha1":"1dd3a5e28d6eb23425328ca534c47ab997e1a379","sha256":"20ab16ee4457dbf9756523f09571675d96e67c9f5c9f78958894054ba520c693","sha512":"7353779fd55291a514723da855162db8ad7e7d4da0002efb98399443859976819a954747d2b435b9c49a4740c1dd97108bd524f4dcd7af2554775604588f891b","ssdeep":"","tlshash":"69513b9bde2b0595c47141b1b5d23de9e1397710060e58ab2ae2fb6dd9fc1ae0c382b0","first_seen":"2026-08-23T16:01:42.826926Z","last_seen":"2026-08-23T16:01:42.826926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":33,"connect":8,"send":0,"wait":36,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/cf389df63b1d0248.css","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.599Z","timestamp":1787500838599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/cf389df63b1d0248.css HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 16:00:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 08 Nov 2025 03:03:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13784\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74994,"size_decoded":14114,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63240)","md5":"ce75596640dd3c40691cc5f6de6f93da","sha1":"5b1c5636612a5054b17d3ec5237a4bfae29098aa","sha256":"d3cde5ec1771f7f96deb8eee9a0a4b0f76d0dbb9b7564209f7f4f16445b6f38a","sha512":"00e010edf08bd8b49900b8d5b21f6097e77499eb947233c934e334fe821426d950ef70ea1488e678b68a9c2ed6df8e80529a6e3f11385780062aa77ec51a0bcf","ssdeep":"1536:G2TCiTq19Dei+d3D1Gyl2SWi9Lhuli83T8k:G2TCiTq19Dei+fGyl2SWi9Lhgi83X","tlshash":"5c73c92ea741252a1c3749f6e2d0b95c62269281ff3b56f7f92214208fc56f72d2379c","first_seen":"2025-11-14T20:58:58.300119Z","last_seen":"2026-08-23T16:01:42.828219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/osano.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.629Z","timestamp":1787500838629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/osano.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 249706\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":249706,"size_decoded":249929,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/youtubei/v1/log_event?alt=json","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:42.469Z","timestamp":1787500842469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Request-Time: 1787500842463\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtDanRSWXBTUmE5OCiVkLjEBjIKCgJORxIEGgAgJQ%3D%3D\r\nX-Goog-Event-Time: 1787500842463\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20250729.22.00\r\nX-YouTube-Device: cbr=Chrome\u0026cbrver=138.0.0.0\u0026ceng=WebKit\u0026cengver=537.36\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 788692020\r\nX-YouTube-Page-Label: youtube.player.web_20250729_22_RC00\r\nX-Goog-AuthUser: 0\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1787500839788\u0026flash=0\u0026frm=1\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=1024\u0026biw=1280\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C580%2C326\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 4549\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4549,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NG\",\"clientName\":56,\"clientVersion\":\"1.20250729.22.00\",\"configInfo\":{\"appInstallData\":\"CJWQuMQGEOK-zxwQyfevBRCJsM4cELfq_hIQltbPHBDds88cEJT-sAUQ9quwBRCh188cEP7YzxwQrtbPHBCG2c8cEIeszhwQsIbPHBD2y88cEIiHsAUQvZmwBRDGy88cEM6szxwQvdnPHBCBzc4cEPyyzhwQzN-uBRC21s8cEMXDzxwQipeAExCqnc8cENPhrwUQntCwBRCThs8cELnZzhwQmY2xBRCYuc8cEIqCgBMQmsrPHBDv1M8cEJOZgBMQ3rzOHBC45M4cEKiZgBMQzMDPHBDa984cEPDizhwQmZixBRCw188cEL22rgUQ8tjPHBC9irAFELvZzhwQx47PHBDlyc8cEOLKzxwQ_c7PHCogQ0FNU0ZCVVgtWnEtRE9IZGhRcUJsUTB5b0t3RUF4MEg%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"rolloutToken\":\"CLfYpqLJuvS_7gEQ_rfI9ZLsjgMY9Oby1pPsjgM%3D\",\"browserName\":\"Chrome\",\"browserVersion\":\"138.0.0.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"}},\"events\":[{\"eventTimeMs\":1787500839795,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839795,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500840339,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500840449,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839589,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839302,\"latencyActionBaselined\":{\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839517,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839589,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839589,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839728,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839796,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839612,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839827,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839606,\"latencyActionTicked\":{\"tickName\":\"rsf_pej\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839691,\"latencyActionTicked\":{\"tickName\":\"rse_pej\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839611,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839700,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839612,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500839706,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500840456,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h3\",\"transportProtocol\":\"quic\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500840459,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500840460,\"latencyActionInfo\":{\"serverTimeMs\":159,\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500841475,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1787500841475,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"uU7fqvIw8PKbq8UH\"},\"context\":{\"lastActivityMs\":\"-1\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"FQiOaPzmKL3C6dsP08eYmAc\",\"clientCounter\":\"16308\"}}"}},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:46.414Z","timestamp":1787500846414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai.midnight-pd.org/\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:00:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 143765d349003193ebd3783518e376c4c54f428f\r\nx-77-nzt: kziw3OPqkwIUP2TTyGeueifLnlGNjLE/oGyFzkEgVHUEG+kxGd+dk9gsg2LEEJE+NDd0r9w\r\nx-77-nzt-ray: e2f75420d3f2632653198b6a2678b61b\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 148\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3357,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-08-23T18:45:45.908676Z","times_seen":1039,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":30,"connect":8,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetMessengerInput-5TvOyhoI.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:01:04.333Z","timestamp":1787500864333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/WidgetMessengerInput-5TvOyhoI.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:01:04 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-109a0\"\r\nexpires: Tue, 03 Aug 2027 13:15:02 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k6mSVkn/67eP6XIF0og4LyR4pLcWDGS2pb9GyCNt/jk7/ngPggBVAMZbYUvC+kgvrLAoe40\r\nx-77-nzt-ray: fdb541234a9bb6db65198b6a424ed413\r\nage: 11\r\nx-77-cache: HIT\r\nx-77-age: 1737698\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":68000,"size_decoded":24037,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"469cb26497f223941f83e97ea051b63d","sha1":"e25a4e79aea4cb70c71c9567f7d76dbebe32eece","sha256":"ba3a20ab7246a50296e74c08f299dedca678ccc6f584a3912164ebd4976f5b34","sha512":"8ba83e44fd223b98bf62bc3edeb1ca6e0885fe77b238c327d9d9b8929e4ea8c943ae8ad0022d1d9acf10d167a39f97636fe844b33e85e2e4d9aa01122734292b","ssdeep":"1536:7riWM4+61NnmIgNEN3OFdVlwZMHKKO/3xfNA6j9Oxof99vW33XCwtEctfP/gv1NL:9CSZZ3xRzkOXt","tlshash":"24635d943300743da13f8276a12f911af2379194908fc02cb92eddd939b5dd46aefa79","first_seen":"2026-08-06T02:21:22.683595Z","last_seen":"2026-08-23T16:01:42.830737Z","times_seen":13,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/webpack-7858b7ed950ab990.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.602Z","timestamp":1787500838602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/webpack-7858b7ed950ab990.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5260\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5260,"size_decoded":5481,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (4852)","md5":"dd84b37eb9286f35cd5c453592ed4aef","sha1":"596f0f56f403c4927979b5d5120b65ce0e4b6853","sha256":"0a2aaf4d203e7902f697cf38443772b209a3bb7f6ea99094931fa0836208086a","sha512":"860d56fdf92787364d126d50c03e3aaee0c99fcca069b8599404c46acdaa4377d712067d5f14df249ce08e90edd9f1b8835882674562f9010819def8939664b8","ssdeep":"96:BJ1hwBE9qkHAiR5mm0EE4G7lPEhyGVADcVNsSI2LDzN7LDBCMRJ+fP6pZxL:BtP9XAiPT0EE4G7ayGzQ0Dh5CM/+fyLl","tlshash":"adb1d7ee72a8f475179354a0443fe566f63e2472681ed0a0da1ed4f5bc30c998223fa8","first_seen":"2025-10-23T04:16:55.051652Z","last_seen":"2026-08-23T16:01:42.831362Z","times_seen":9,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/v2.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.630Z","timestamp":1787500838630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/v2.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 581713\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":581713,"size_decoded":581936,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/nspix.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.942Z","timestamp":1787500838942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/nspix.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":247,"mime_type":"text/html","magic":"GIF image data, version 89a, 1 x 1","md5":"d8b1e5906a77a303b516c9a0f3e4bcaf","sha1":"174178028c07150b75086abc291a5bb94601a89e","sha256":"2c366efc13702d5bf379b6d5d072ff66fe1d602a6c3185ddd6d6009390fea0f5","sha512":"ca8b77617006c2cfbfdea3432f2aa426ce739da9b5553a9a776f25ad7f7044cf33aa681491fae9fab9583907cad35f79733d2d8ea6cd96c0b680d7c586bf0540","ssdeep":"","tlshash":"17900443c5f00353c5f1c3700d350301174170551504034d414d3175dd171711c1c415","first_seen":"2023-06-05T21:21:15Z","last_seen":"2026-08-23T16:01:42.832752Z","times_seen":154,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/Nn39DYe1otU.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.516Z","timestamp":1787500839516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/Nn39DYe1otU.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 08 Nov 2025 03:03:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 58517\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":167058,"size_decoded":58769,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (57309)","md5":"aa5f440d2c9a2dc342b339946aa3b3bf","sha1":"080e12ec2e997030d3a5f0f39002cb28ad7c2b50","sha256":"ccd5284f5d34e52648806532566edd1b236a0ce9da706fcf1f7f92d37ed72387","sha512":"a9d25f6704bcced8684bab1e1c1e978781664c88f4961f5a1fdf223b2290499e975915baf59da4af50216a6193bc3554a25a592cad5311e6108148878d1979a7","ssdeep":"3072:ulUe9GVuN4ZCGEGfp/JgP/v+6lJc877qmR1Yy:+Ue9uuN4EGhf8P/v+6lJc877qmR1Yy","tlshash":"20f31a7046545436c4838987edb9ff3eb8f6016f8ac19969beba93dc02e9e504ddf402","first_seen":"2025-11-14T20:58:58.322554Z","last_seen":"2026-08-23T16:01:42.83432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/zmIq31voDSWI8AGyiRJe9t7MieBaDmAxmnftlUj7E58.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.622Z","timestamp":1787500839622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/zmIq31voDSWI8AGyiRJe9t7MieBaDmAxmnftlUj7E58.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:43:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59229\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59229,"size_decoded":59451,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (57977)","md5":"d601534c559fb0cc2f6015a6978a7d50","sha1":"6e2550f921267508905c29a80589a8be75b03f7e","sha256":"ce622adf5be80d2588f001b289125ef6decc89e05a0e60319a77ed9548fb139f","sha512":"4f02363996fbbf5950977e019fd23544394a8b51f3c6410c0feca817b33a1a1262bebe7b238b0d45d967bc49159dd5f6b83c76888a66aac0c1ba884309250ec9","ssdeep":"1536:jn1ZsieoP9oqsRFhyoXoumqlVS46ZLBUX2MtbnGj1E:7lonRFsoXoubMpLg2MOE","tlshash":"a34318dfb2c367351ae271e2009b600a52bba9559c981d5fbd01e6f41e31d87b02bf39","first_seen":"2025-07-26T08:13:23.535773Z","last_seen":"2026-08-23T16:01:42.835558Z","times_seen":217,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/www-player.css","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.628Z","timestamp":1787500839628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/www-player.css HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 16:00:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 Aug 2025 04:44:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 70070\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":498397,"size_decoded":70400,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"49deefbb405b502b8932f4d64e121e80","sha1":"df15d796dd029f559d87dcbf0a1304f4b9f5bcdf","sha256":"67fe3f1a3a87b928651d3ec8024c7dd20f8b45c0c50873a3c3ac93066cb790f3","sha512":"db7954b6e08d46b2f18bb45a01ee89f1c819f3e32a3360336a00f52594058d487061fdf981f7f255583ebaf009a9d9492ed6983b6082da924cb3e6173060ba80","ssdeep":"6144:mg/+v62kqMMg7UZBxMYoLufomxw6oXoNm:aCUMMg7UZPoafomxw6oXow","tlshash":"65b4e972f0d1233cb22b8d5997d9964d7339d983e2e22aeff11165dacbc73851326206","first_seen":"2025-07-30T13:06:15.376412Z","last_seen":"2026-08-23T16:01:42.837003Z","times_seen":653,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.730Z","timestamp":1787500839730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 02:10:11 GMT\r\nexpires: Fri, 20 Aug 2027 02:10:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 309028\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":16157,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T16:01:42.838238Z","times_seen":544372,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":20,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cmp.osano.com/AzZXI3TYiFWNB5yus/2016b368-eac0-4852-b001-c9fd9aaaaf77/osano.js","fqdn":"cmp.osano.com","domain":"osano.com","tld":"com"},"ip":{"addr":"65.9.62.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.851Z","timestamp":1787500839851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.osano.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 19 Jul 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:2C:9F:A5:2D:D4:45:03:1D:62:65:EB:95:5A:A3:92:92:5C:61:CD","sha256":"5C:AF:6D:24:23:D4:1D:21:96:9F:A6:82:D2:67:BD:A2:46:C4:7B:77:A6:A1:91:72:CF:D6:96:61:19:79:24:10"}}},"request":{"raw":"GET /AzZXI3TYiFWNB5yus/2016b368-eac0-4852-b001-c9fd9aaaaf77/osano.js HTTP/1.1\r\nHost: cmp.osano.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63749\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: CloudFront\r\ndate: Sun, 23 Aug 2026 16:00:40 GMT\r\netag: \"292a521b1754e2d3be1c9da024991ef9\"\r\nlast-modified: Mon, 14 Jul 2025 10:12:57 GMT\r\ncontent-encoding: br\r\nx-cache: Miss from cloudfront\r\ncross-origin-resource-policy: cross-origin\r\nvia: 1.1 49e77a7cccd137cc039a0a7d3ceb5432.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=86400, s-maxage=86400, must-revalidate, proxy-revalidate, no-transform\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: gF_FLu9XBRHzh6gRqoEX5JUqtvZOlP_sYnOHm0uk3QVzCD7jX82YAw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251069,"size_decoded":64613,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65473)","md5":"2953b5d8c6ffe8947f6bdfb70a354e17","sha1":"1e1310edd721836b0aa7887cfcab76fcfdc25ba9","sha256":"e977a7351ef1a24a660ead7a49ba9fbbfe12935e33ea88489e0d81a16fd2f789","sha512":"e6f92c2007ea26c8d39ed005ec302b8db108912ad810b87dd07ce7de1571534c3a04492e319b1afdc3273f444939ff92258dbb548eeab3aa6999a9f083f41c7d","ssdeep":"3072:l6X4enSf+6zrk9bym39gTJsacCkXgTpt3BFha/qmOmLpRZ+2zxvp+Qh:l44KSfZqCkXWtxra/qmOmLpRM2ztYc","tlshash":"e73408a536daf5b112e356e9843b0509f33aae45342dd090f364dec42c2864fa676f3e","first_seen":"2026-07-12T13:55:20.312279Z","last_seen":"2026-08-23T16:01:42.838802Z","times_seen":4,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":6,"connect":17,"send":0,"wait":354,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T16:00:37.903Z","timestamp":1787500837903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 09 Dec 2025 14:15:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 48250\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":285852,"size_decoded":48680,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55980)","md5":"9a1459d47612e9eb7f5238e0d6ad628f","sha1":"200865a8b59c8291f481e7c71d53b9d562cd35be","sha256":"2abe2537e360a90387757233dc8243ec91f7c73d00b8b1df8eeb8fcfeb70ba08","sha512":"be06b6cfa2bbfc52db8f454eea74ef3a60607edbd5b5a267f30140fbf03d91d1e0527895783c278d3b272d00c3c00a17880382547b3648b8abaa015f9b11e266","ssdeep":"6144:og+SQWez0NI8hf9wfdpyY5g1s9DKz6v0yVJ:NwGhf9wfdCCv0yVJ","tlshash":"79546c762540fe0ed8878e8ea63e6c35701fc667c3e6c6ade09cc91151c54babe9348d","first_seen":"2026-08-23T16:01:42.839947Z","last_seen":"2026-08-23T16:01:42.839947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":0,"dns":178,"connect":66,"send":0,"wait":146,"receive":75,"ssl":143},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/gtm.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.632Z","timestamp":1787500838632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/gtm.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 313322\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":313322,"size_decoded":313545,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (5289)","md5":"89ceb969f3c1878eebc332b58b8d24db","sha1":"2b367e1765d5f03a5c8c3e08b7327079e475b391","sha256":"90529f2bb962860258050afbc1296e76481768a527d5e9f601c67e9470362b69","sha512":"f9a1f0d4954658a7f9d91eb08253661dcf263a3331ab6ce33b862298f707b4145768e65c389f5a3407e78fc643ee78da642407320eb251651ef87e3cba270e9d","ssdeep":"3072:mNnjweWKA8xwym6o6A07J58JGXbrunAxVOrqtcRWaWU5Fjt2YwTYyDgA:BgvmZHnUOq9aWU5Fh2nTYyDv","tlshash":"fc6418cd73d6b42283a2a478503f018bb57b69e2f44cc899f185d8d42e74aaa4177f7c","first_seen":"2025-10-23T04:16:55.263222Z","last_seen":"2026-08-23T16:01:42.841531Z","times_seen":9,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/nspix.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.145Z","timestamp":1787500839145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/nspix.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":247,"mime_type":"text/html","magic":"GIF image data, version 89a, 1 x 1","md5":"d8b1e5906a77a303b516c9a0f3e4bcaf","sha1":"174178028c07150b75086abc291a5bb94601a89e","sha256":"2c366efc13702d5bf379b6d5d072ff66fe1d602a6c3185ddd6d6009390fea0f5","sha512":"ca8b77617006c2cfbfdea3432f2aa426ce739da9b5553a9a776f25ad7f7044cf33aa681491fae9fab9583907cad35f79733d2d8ea6cd96c0b680d7c586bf0540","ssdeep":"","tlshash":"17900443c5f00353c5f1c3700d350301174170551504034d414d3175dd171711c1c415","first_seen":"2023-06-05T21:21:15Z","last_seen":"2026-08-23T16:01:42.832752Z","times_seen":154,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/pixel(1).html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.537Z","timestamp":1787500839537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/pixel(1).html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 170\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":277,"size_decoded":420,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"edb377166ae87d3b43280c1c4b9f2f5e","sha1":"28086acf1174dcc9e25390853e17bd6cea201172","sha256":"1577556bbd53f68f49f1a812559cf3dbeda741572ae835706b4b19868178229b","sha512":"19341ad01b905f9f2a30a6aa2376f9fb9fe1d029f96e0fb4210f6e9ee4828ca7b4c49807b8200eb5790fc8a3db50b88d63a5c048aea546bd9cb7a21727fd6626","ssdeep":"","tlshash":"add02b2b9d05aa39234680be94b4d139748d207856219807d18accad24f8ee15c9d9a0","first_seen":"2025-10-23T04:16:54.630728Z","last_seen":"2026-08-23T16:01:42.843227Z","times_seen":9,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.hsforms.net/forms/embed/v2.js","fqdn":"js.hsforms.net","domain":"hsforms.net","tld":"net"},"ip":{"addr":"104.16.5.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:40.452Z","timestamp":1787500840452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hsforms.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 03:20:42 GMT","end":"Tue, 20 Oct 2026 04:20:26 GMT"},"fingerprint":{"sha1":"C9:86:A9:64:9E:45:AD:11:8B:0A:49:29:CE:99:1D:58:CF:BC:21:B8","sha256":"6C:71:C8:7F:F0:77:24:AF:75:A2:05:0E:27:1B:3C:D0:E7:88:58:8C:B3:CB:73:53:25:FF:AC:D4:F7:A5:E6:91"}}},"request":{"raw":"GET /forms/embed/v2.js HTTP/1.1\r\nHost: js.hsforms.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 23 Aug 2026 16:00:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 18 Aug 2026 08:38:09 UTC\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: WMzHkg0vE.Ql.QyzftSH8Zk.giv.iBJ.\r\ncontent-encoding: gzip\r\netag: W/\"cc537b140e9ab24db424ed9cd1cf6734\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c13d71f8919c23db6bbd1c08a4dfb350.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: IAD12-P3\r\nx-amz-cf-id: U0ql-3NZrDBLbRqptKXfQojHE0tCz72q4YskBbGwo8MpEAGvVZaYAw==\r\npriority: u=3,i=?0\r\ncache-control: s-maxage=600, max-age=300\r\nx-hs-target-asset: forms-embed/static-1.11271/bundles/project-v2.js\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-tag: staticjsapp-forms-embed-v2-web-prod,staticjsapp-prod\r\nx-hs-cache-status: HIT\r\nage: 561\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=QIt95QiMwe5Lwrwac3k_D9Omh3sMYhlo2.b5PaMXVbY-1787500840.566335-1.0.1.1-acXSfpBNjPIiixC8hWkpRrJbaSpITlaWz7u_PJeDb7NK.CjiAFfubFO0W3LdckhvZktfG.cI8Y9mYBwwPMIRp_Keymie9FyvbKdU1BW5L.nlrpiAhOp21yk8ZimWqL5u; HttpOnly; SameSite=None; Secure; Path=/; Domain=hsforms.net; Expires=Sun, 23 Aug 2026 16:30:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fszKA8l2cHr8AKd6VV2zVzbVVanIP3qJA3kQn%2FIu2bDlPAh5%2FAul8fZeoie0gi5ZZxwn%2BJxtymUAMGtyFCzkyA2%2FsyFkc0%2F3W1Tl%2FtD0cnDV%2FQuMvYO8UjUlapp5ALoHti%2BMGpRrNh%2BR%2Fg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a2fb54dd88ee1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: hcid;desc=\"\", cfr;desc=\"a2d7acd75956339b-IAD\", cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"QIt95QiMwe5Lwrwac3k_D9Omh3sMYhlo2.b5PaMXVbY-1787500840.566335-1.0.1.1-acXSfpBNjPIiixC8hWkpRrJbaSpITlaWz7u_PJeDb7NK.CjiAFfubFO0W3LdckhvZktfG.cI8Y9mYBwwPMIRp_Keymie9FyvbKdU1BW5L.nlrpiAhOp21yk8ZimWqL5u","quoted":false,"path":"/","domain":"hsforms.net","expires":"2026-08-23T16:30:40Z","raw_expires":"Sun, 23 Aug 2026 16:30:40 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=QIt95QiMwe5Lwrwac3k_D9Omh3sMYhlo2.b5PaMXVbY-1787500840.566335-1.0.1.1-acXSfpBNjPIiixC8hWkpRrJbaSpITlaWz7u_PJeDb7NK.CjiAFfubFO0W3LdckhvZktfG.cI8Y9mYBwwPMIRp_Keymie9FyvbKdU1BW5L.nlrpiAhOp21yk8ZimWqL5u; HttpOnly; SameSite=None; Secure; Path=/; Domain=hsforms.net; Expires=Sun, 23 Aug 2026 16:30:40 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":606241,"size_decoded":201812,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65468)","md5":"cc537b140e9ab24db424ed9cd1cf6734","sha1":"702eea30310e4d3655fe82c14a63ef6859ed40fe","sha256":"e4d5393c1089f5176ddcaac4755b2a1d4ba688882edf2217520b8062ae210db0","sha512":"16357bfe31ec2bfdedb4863569de9d6ff923f62ef9299fcaf9662fbf93dc3b79916fd1123b778ea008b603542a1114398a3e82e433ff1904b159d5193262517e","ssdeep":"6144:SS85fuNlKtr75C++7jnQV1nPnZOyiWO/hULKTEAFnrOSqJSIUI9SEefdLBFBVLon:SJ5tn5WWO7FnrO/JHd9hefdLBFzUwg","tlshash":"e8d45cc53185f0215bb302b660bf601af33d1d29780d8990f765e9da38e985a917bfbc","first_seen":"2026-08-18T11:02:05.698641Z","last_seen":"2026-08-23T18:33:32.171441Z","times_seen":107,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":3,"connect":14,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/page-5e0921c3dc577898.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.624Z","timestamp":1787500838624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/page-5e0921c3dc577898.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1722\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1722,"size_decoded":1943,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1722), with no line terminators","md5":"6336154248ebad2baa89abd7dd08257f","sha1":"f2b4cce7177f84edd2b6a4b19f9a7b7dc1404c1b","sha256":"085c226b8c0b322fefe5c03ea72b73986cb7cf923cea8ad608bda0a213cdc1c7","sha512":"6693f91615ff2fd40eebbf0091e3a55e4b45dc50ee962b23c553a1f6a1655cafdb6e63d66804da797460a089166bebd2e893d6a6ef1358d14f4f905888d0c4e0","ssdeep":"","tlshash":"59312a4a171db55f59276ea4ff879c0e641e912098274e206164edf238233a8f2f096d","first_seen":"2025-10-23T04:16:54.250513Z","last_seen":"2026-08-23T16:01:42.845159Z","times_seen":9,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/8ad60fd6dff8239f6970f650af32af1273a51f5d-201x377.svg","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.644Z","timestamp":1787500838644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/8ad60fd6dff8239f6970f650af32af1273a51f5d-201x377.svg HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 16:00:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 02 Aug 2025 04:44:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 779\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1680,"size_decoded":1112,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c517dc5d746b3c8c0d69bfaf39defcdb","sha1":"5527ba1416dc278ed1b8e4af360cd75e965b2ee0","sha256":"ac959899dac5033ce7a7a6ed68bcb8f73458fbd3da568d239ca7b10b4c193dda","sha512":"d46a4e8d51b982efd2a69ece6453db339e4ff47eeac1bef7d76f1d59fcb8eecbb071816ef00d33253f9f117a5c35db0b411d21201e819956fd9a4f34acfcf4ba","ssdeep":"","tlshash":"cb3124ec73b45eedce909fc1de4661d50566b4bf57420208c2c8ba9e18c10ae0dd6a02","first_seen":"2025-08-11T16:38:13.704073Z","last_seen":"2026-08-23T16:01:42.846691Z","times_seen":13,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/_next/static/css/bc8831281eb208c3.css?dpl=dpl_4jWMjBT1rHL9DiRCa4Gxba4iJVij","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:40.705Z","timestamp":1787500840705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /_next/static/css/bc8831281eb208c3.css?dpl=dpl_4jWMjBT1rHL9DiRCa4Gxba4iJVij HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:46.317Z","timestamp":1787500846317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-BKfXgL7M.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:00:46 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-42dad\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: kzz99LMBcxI4417olqv+wbPU6Koq1MBBvuiIepdPtUxuCIdJVGprao4zjx+hY+r2KZrfk58\r\nx-77-nzt-ray: fdb541234a9bb6db53198b6a6824d912\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1737928\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":273837,"size_decoded":93096,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-23T18:45:45.908029Z","times_seen":619,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/2537-3779df9e937deae4.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.626Z","timestamp":1787500838626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/2537-3779df9e937deae4.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10115\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10115,"size_decoded":10337,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (10115), with no line terminators","md5":"1ac0f608a4d3dca1eee3524f51e9be1e","sha1":"9f3593272a80f47e3923e9a8cf70f524979b53a7","sha256":"07b4d957abfbd249488873368e9a599dc098d054c5c008ed902147d71184d52c","sha512":"12c3c67994096d3a8445b0c7f881d7d1fab0bb33cbc8344a49c7665158327bbd1661c61012bca3318df405b9a2b0202ddc1080ee5348dd5eb2b2d17b28af3dd6","ssdeep":"192:BxDmwvqp7QG1EQwFJQzCUYbDtClg1e1rfGam1+BdbjYPs/i+MTMVdLoUJn61UYyg:G4qlQGaQB/YXSTGaj6HTMAlSzz4","tlshash":"6a220ab5b6c8fc75528e09d4843b430a76592b35551e2840f3ee8ce76378e8750a2fd9","first_seen":"2025-10-23T04:16:54.832448Z","last_seen":"2026-08-23T16:01:42.848499Z","times_seen":9,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:46.316Z","timestamp":1787500846316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-BI-Moxe0.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:00:46 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-3ea0\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k/6rcWtl4Pcoo6BED36k6BbOUXnjMzHa1mM9OXsGb8H+FiyNLaejQ/LzyvilrWTlr0u9E3A\r\nx-77-nzt-ray: fdb541234a9bb6db53198b6a8d49cc12\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1737927\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16032,"size_decoded":6731,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15624)","md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-23T18:45:45.896953Z","times_seen":629,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/bc8831281eb208c3.css","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.600Z","timestamp":1787500838600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/bc8831281eb208c3.css HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 16:00:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 02 Aug 2025 04:44:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3523\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11540,"size_decoded":3852,"mime_type":"text/css","magic":"ASCII text, with very long lines (11540), with no line terminators","md5":"8a6b7ff276c76854eba33e5d932bf0c3","sha1":"8904f77fe10b5fc719dae61233cbac719e7663fa","sha256":"8475ce402e27c127ec0753bafb5e33ae134f3f0a5ae686d5a693fe89e1879539","sha512":"aea28983f77e9ab388ff9b800270e228887724cbc50fb252171478fcb71e95ecfa82a71771dd579d885fb69a1f1fc06dae213baec42f1ec95c9814353e146095","ssdeep":"192:3mUJbiKneTJTXdKSme+jeHo0v2GZHcZ5Dfufs:2UbeTJDdKW+SIg2WoRWfs","tlshash":"8f32eda86310281352134f3247b59bb4ddb4489207d3cd7ea1c1ad84d6bacbd276f6b9","first_seen":"2023-11-18T08:45:41Z","last_seen":"2026-08-23T16:01:42.850686Z","times_seen":185,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/error-17280e138e94e511.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.628Z","timestamp":1787500838628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/error-17280e138e94e511.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 818\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":818,"size_decoded":1038,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (818), with no line terminators","md5":"b1518cad6b8e2833ddcc5dc93f32d7c6","sha1":"a1a2ff2b29a1fa065dba54039ea0c310c6ce5e98","sha256":"91f50578ec245e81772dfc954f059fa723454d646f729f2f17030a4f5827177c","sha512":"c935c159b80d2335e002e1da9b3682bbfa5229e99785b657c1709a50341bae046773b76bd847af3d04a2bcbaf9e2dd8ed20b9f4bd401cf161002776f528c2d37","ssdeep":"","tlshash":"cc016f45b485fe5ca95f0cd4217f940e706a2e5dad0d88a464f82c521c550ae7653fcd","first_seen":"2025-10-23T04:16:54.868321Z","last_seen":"2026-08-23T16:01:42.851311Z","times_seen":9,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetPopup-CQY73JnA.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:01:04.331Z","timestamp":1787500864331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/WidgetPopup-CQY73JnA.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:01:04 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-1658\"\r\nexpires: Tue, 03 Aug 2027 13:15:02 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k5GhF1z8+J2LsFs1NDgv6WsWXnBKEo08+v0wez8FnTfJImrG4Xbq1WKBFL7jQC1hgGmyJ+o\r\nx-77-nzt-ray: fdb541234a9bb6db65198b6a15a1bb13\r\nage: 14\r\nx-77-cache: HIT\r\nx-77-age: 1737670\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5720,"size_decoded":3186,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5671)","md5":"cb52e13ba095a4670b882d5ab5a1419d","sha1":"64e30a6fffd630a161e882efaeeee903da6d998b","sha256":"ce799ae4d1840cb0439286105a4229f103b40b4bfa4f30f9b934febd2be277db","sha512":"171397ced412550ffef09a98466d71d56299d38637bbbe299c5f9684641190289f799cb95838dda42b5f3d887c6d124462f32c5dfb982c6ce0da0baba63c6037","ssdeep":"96:Hqcey1R4J3Yjc/R5HZMi9KeGvxSkEti3iy/ZNhnpLgz+:HYyOYw/R5HZUeEEcJNB","tlshash":"dfc1a6553182b03eb55fb5087a28e1abf239d4c9d91ba63d9207ec4432d8cc28dd779c","first_seen":"2026-08-06T02:21:22.641204Z","last_seen":"2026-08-23T16:01:42.852682Z","times_seen":13,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/6649-482119baad8450e1.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.618Z","timestamp":1787500838618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/6649-482119baad8450e1.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 143956\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143956,"size_decoded":144179,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (64357)","md5":"c33c21aae84a9047e3286b2b6b291f1d","sha1":"d811b51c48d3573a6176442824455e99e60852e7","sha256":"943eb28d1f32a0b0eee768b2d637c799b3dc39082b97299306cd1315ea34a511","sha512":"c5e8cbd8166c8c3221d70163ace4268c410cda6c074ba05496920ba6bd8f916b38326a19ffd73b325f6ff6dbd682dcf3558fe7abefc88ecbabe83a8bef21f27f","ssdeep":"1536:liuViTK9nRiEUXC49hYgaMb6B4/LJdx/NOrI8MYLI7puHoWg5LDrsmYJ9MBV/NZK:aV9hv4qb6UvL3/67X","tlshash":"3be3f8aa73517535c3db5199c06b0a41f33b29d8240a402cb67dedcb256458ab2fbf3e","first_seen":"2025-10-23T04:16:54.405883Z","last_seen":"2026-08-23T16:01:42.853396Z","times_seen":9,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.508Z","timestamp":1787500839508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:00:42 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k2l1Rq5XOFnAue5zqvdufbqmNHmTiY5RoDwccp/dk18r5j6SgwbTaW81ZlK++C9RhO3T8Fo\r\nx-77-nzt-ray: e2f75420eb0b7b584f198b6aedbec52f\r\nx-77-cache: HIT\r\nx-77-age: 6\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6041,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-23T18:45:45.874584Z","times_seen":8697,"resource_available":true,"data":null}},"time_used":3303,"timings":{"blocked":-1,"dns":30,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/base.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.631Z","timestamp":1787500839631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/base.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2609054\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2609054,"size_decoded":2609278,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"7106815cf6bdf7b4d8ff2e1341aea303","sha1":"543b815e025a152f74c0e1d663bc72d54b6b7e42","sha256":"e6275f81ee2ca6b74983593066c0d76e24627356bf06c4293f9d464c81289d68","sha512":"5f54505ef218c5e7f64a735eef4233f810f64bc3dd1c48d78217d87532973b13edf916bc99f83c18ffdb03602a20fcf8387bf03639dd31b4c20522719c8131bf","ssdeep":"6144:ZRWuxA8gSKdfkOId9OvzXBuIfXN2sHh9vfF2UdEbIxCeLWIQgGNNFYQx3DtryCCL:6um6dKDkOXfuIxCeLWIO11tuCzbKKDm","tlshash":"66254bcc32d6b4513363f1b8967f2107b13b6815644c896cb246e9da6c3990a937bfb8","first_seen":"2025-07-30T13:06:15.441996Z","last_seen":"2026-08-23T16:01:42.855646Z","times_seen":647,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/1dd3208c-e155c594ab2e0c3d.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.605Z","timestamp":1787500838605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/1dd3208c-e155c594ab2e0c3d.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 172835\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":172835,"size_decoded":173058,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e02d1cd6e751a1bbb4ff2a368dd1b66e","sha1":"982a9cbcc9403fb90fbd80cefd2c6a90b0df1829","sha256":"359deca4a1b7762a78f0fd35eafb5f746e88a2e793056c0e1e2b819d83f8c0fa","sha512":"9fae60504ebf4d09c7953b6cfc82ac7436cf75d76492ade590c6a5d156270b7804989b07deafa6ba040423e433af9edcb3654728e5c6862d82fa66d8b182a5d8","ssdeep":"1536:9VjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:Vzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"6af3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-02-25T09:52:04.538021Z","last_seen":"2026-08-23T16:01:42.857139Z","times_seen":982,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/main-app-420abd7798f6e175.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.608Z","timestamp":1787500838608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/main-app-420abd7798f6e175.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 473\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":473,"size_decoded":693,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (473), with no line terminators","md5":"1d45661648b73d31fc3b9b073b1abb11","sha1":"33d7b68d474e2996c2b4673207fc6e183f027802","sha256":"8306894da00cb9ab79e7d9336398c5f3ec3f7c361fc125a5b26c1bf2a5982b2b","sha512":"ad20bd27c3fd60aec13fd7d60831590d3385a77da654dbbabea8ca421cbcb07fa294e164727d7453d93adccc00a7337aa25a6fe6ac81a0c99f133634136545fc","ssdeep":"","tlshash":"b8f05e9a264d742f28336a60fdd7ac2e285e8139287758506a05ddb12c33a6cd2f0c38","first_seen":"2025-03-05T05:44:32.012927Z","last_seen":"2026-08-23T16:01:42.857855Z","times_seen":219,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/cast_sender.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.618Z","timestamp":1787500839618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/cast_sender.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:43:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4272\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4272,"size_decoded":4493,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1143)","md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-23T18:51:45.058297Z","times_seen":12077,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/pixel.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.644Z","timestamp":1787500839644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/pixel.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 168\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":275,"size_decoded":418,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"dc306990cc600795a1e0f370f7d57cd4","sha1":"466c3249b307ae898cc387a7e6787593ab51ba2b","sha256":"3953126a6f6936d1edf140aab420fb68d6ef32ed01cac1dd23f14fc178ac4f59","sha512":"618be3e328291d4483531e4a641106685aab29a321aaa9fddb7bad30b3c31187ca36efa6c833cbca3b9f4634bf8289931f578acacaa7298215b7b43819ec0089","ssdeep":"","tlshash":"f1d02b6b5d019639235680be94b4d539209d207855219807d18a8cad24fcee15c9d9a0","first_seen":"2025-10-23T04:16:54.668354Z","last_seen":"2026-08-23T16:01:42.860117Z","times_seen":9,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/apple-icon.png?010a3d75d7e80b14","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:40.341Z","timestamp":1787500840341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /apple-icon.png?010a3d75d7e80b14 HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/297-6d76bae9b6e1ddd1.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.620Z","timestamp":1787500838620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/297-6d76bae9b6e1ddd1.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19207\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19207,"size_decoded":19429,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (19207), with no line terminators","md5":"672529b44ce7835ba12a9cd965c10243","sha1":"fe31dd4beb4a2a6261bbd5eddd4f5e0e726dbc21","sha256":"0786d452a90f5299a126bb72ee4101b59b61fec75cfa67d1a0177cd44cb0fd3b","sha512":"30a685f3733445e1f971b2c8af02a442a8e20fbc419b137e256b373696dbf2cca700760df9991c7ce3ab370f0bd44fd7fc5a363a12733d8d3fd9aeba1a3437e0","ssdeep":"384:PyWF9waIrt8J2nHrGD2ON7OKJCEnqAOGWougqMOmsRf5/bb2wsOU7S6OwTTTOJ6/:DIRSDfNCcCEnqpGWiqNxRx/bb2wt0Svk","tlshash":"5682b6ffb3f571c4d10e8ff098bab82d763b35f97a08c29486999568b5191c8a046ed0","first_seen":"2025-10-23T04:16:54.500236Z","last_seen":"2026-08-23T16:01:42.862864Z","times_seen":9,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/3848-70958eefff98a5a4.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.621Z","timestamp":1787500838621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/3848-70958eefff98a5a4.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13012\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13012,"size_decoded":13234,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (13012), with no line terminators","md5":"c86a014e0ded33c49392d40c728613fb","sha1":"6811f7686cdd6518f03a70d579507aa5dfb8a493","sha256":"086995014bd22d5f55a465ff9ccf53386beb79c3db5ee1c299b47c0a2dbbb080","sha512":"e156325bd8fedf2911f282a6e2b3e7457b6e1a9114b3820c2d126d67a0cacf91044ef312c32cd74356c6eba255236f033765dd7cdf480ecc28971f78dc36c29c","ssdeep":"192:i91AEwIzrICoQE7gP5xVyDN3MUtp4jtZVNuseRFEM3W:KAEwIzrICdRByZ3MUkjb19Mm","tlshash":"7d42519cf4d2bedcf96b98c4a67f540db21f1b44de0a08b4f9b8680468451ac7653bcd","first_seen":"2025-10-23T04:16:54.440747Z","last_seen":"2026-08-23T16:01:42.865235Z","times_seen":9,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/_next/static/media/0e96d314a90a6138-s.p.woff2","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.633Z","timestamp":1787500838633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /_next/static/media/0e96d314a90a6138-s.p.woff2 HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai.midnight-pd.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/pixel.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.639Z","timestamp":1787500838639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/pixel.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 168\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":275,"size_decoded":418,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"dc306990cc600795a1e0f370f7d57cd4","sha1":"466c3249b307ae898cc387a7e6787593ab51ba2b","sha256":"3953126a6f6936d1edf140aab420fb68d6ef32ed01cac1dd23f14fc178ac4f59","sha512":"618be3e328291d4483531e4a641106685aab29a321aaa9fddb7bad30b3c31187ca36efa6c833cbca3b9f4634bf8289931f578acacaa7298215b7b43819ec0089","ssdeep":"","tlshash":"f1d02b6b5d019639235680be94b4d539209d207855219807d18a8cad24fcee15c9d9a0","first_seen":"2025-10-23T04:16:54.668354Z","last_seen":"2026-08-23T16:01:42.860117Z","times_seen":9,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/nspix.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.696Z","timestamp":1787500838696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/nspix.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":247,"mime_type":"text/html","magic":"GIF image data, version 89a, 1 x 1","md5":"d8b1e5906a77a303b516c9a0f3e4bcaf","sha1":"174178028c07150b75086abc291a5bb94601a89e","sha256":"2c366efc13702d5bf379b6d5d072ff66fe1d602a6c3185ddd6d6009390fea0f5","sha512":"ca8b77617006c2cfbfdea3432f2aa426ce739da9b5553a9a776f25ad7f7044cf33aa681491fae9fab9583907cad35f79733d2d8ea6cd96c0b680d7c586bf0540","ssdeep":"","tlshash":"17900443c5f00353c5f1c3700d350301174170551504034d414d3175dd171711c1c415","first_seen":"2023-06-05T21:21:15Z","last_seen":"2026-08-23T16:01:42.832752Z","times_seen":154,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/cast_sender(1).js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.629Z","timestamp":1787500839629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/cast_sender(1).js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48673\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48673,"size_decoded":48895,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1633)","md5":"226a9abc9e14c4b8b452223d2b4631e7","sha1":"89a9eb890755c16982d8571d9cdfe42726a4c7b7","sha256":"7f6bfc238b9bddfabbfc20464944718e0246088517cf84a2d2aa2bc8c1e380a5","sha512":"d4faec7997f057be268e080f3703a7ceadf473cbe1681a70ddc10c309da6630df1d5513ce4bc9c862e65699dd7e891dba614b004bf1a0b2b57feb1b218cb838e","ssdeep":"768:TYrRwoA88niJYbfJdjRNP5qF1BgOKpgFSavh1ZhViey6pkFlprFfVvQH9qVHLiho:TYrj/8cOnRaBgpgDQey6pkFlprFfVvQi","tlshash":"f7231b0c6971623db2d3e8f020bf00a97e7a787db444846e7988dce2597568d852eff4","first_seen":"2025-07-21T20:04:55.585785Z","last_seen":"2026-08-23T16:01:42.867964Z","times_seen":13,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/www-embed-player.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.631Z","timestamp":1787500839631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/www-embed-player.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 355825\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":355825,"size_decoded":356048,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1179)","md5":"9c435b0d8c14cb9cc92035b2640fefca","sha1":"4a616d1d58d4c28ddce2156d48687f8af12c4703","sha256":"2de42ed8515ceaa100dea97e5f05b589bbaba4a5b85f5f031948e33cf0388dbf","sha512":"f00714b093bb3f62ade3ffd204c3e1a5f7b7c091ae022dcf6d5bdc2633cfe3fbb241fe67735b30e84f113da5ee6b98aefffcd6bf0990b28651279e19791b5e19","ssdeep":"3072:Rwu7Y4GAKgmVUjdkKiqTC61zeV+dbNNJStK7aAgBUrj3Fv:E4ZAUZkKiqT/1aVGhNmK7aA1v","tlshash":"01744bcdb692706352a3a5b4803f110bb13a78aab80cc9b8f195d5d92d7495d8337f3e","first_seen":"2025-07-30T18:59:23.341194Z","last_seen":"2026-08-23T16:01:42.870166Z","times_seen":604,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/1528-5b651a682d288e05.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.607Z","timestamp":1787500838607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/1528-5b651a682d288e05.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 124309\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":124309,"size_decoded":124532,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d1f83ea442d663ba1a2bff64a22bb366","sha1":"79ebd3ccaff49ff6883d210cd058907ecef0b184","sha256":"4801b0509070fd32cd961ed98adb19cbfb2db9be9d6ed635c570dcf04abb3abf","sha512":"2645df41656f2903d6a8d944e7d27d27ae971858a93c53ef41b3172bce9b84d5fa51ccc67bcec4bc0f7fd5ce2a95d96f4bc585762940e5ccdea2d6ff092bb89a","ssdeep":"1536:hDwxIGExqHgis8TdluER6mmNOKg5UF/v7:V4XT4On5Az","tlshash":"84c3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-10-23T04:16:55.065374Z","last_seen":"2026-08-23T16:01:42.872338Z","times_seen":9,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/4251-809de9329659cd65.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.620Z","timestamp":1787500838620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/4251-809de9329659cd65.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 90517\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90517,"size_decoded":90739,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"501ecbffbd8d64c220825484592cb3fa","sha1":"c3d23379df351792b7a4c9e498bc6b4b09404938","sha256":"fd3771178cb0f44f97eaf1dec4d91e36e0188c6c6eeebe6c195bbddf2dbacfa2","sha512":"2f2d222b750013eea95d7665f37cc01237120148e37c6febf6f3e4bd5583c0a01a8e6a839a99a36259f1d3c603d03391a7e4364b5a8eb57b08fb1cc9029cb599","ssdeep":"1536:l5sszYQCV7mxBlxvHvm8f4K56WPlgCJ/Ruidzvpcwnv5CXiA6wwQ:lOIXg1QtBTPLQ","tlshash":"ce9309dab22175b692eb529b82a9c111b3f55844b449c43cb1f88cdb546c99c03feff8","first_seen":"2025-10-23T04:16:55.499613Z","last_seen":"2026-08-23T16:01:42.874732Z","times_seen":9,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"consent.api.osano.com/record","fqdn":"consent.api.osano.com","domain":"osano.com","tld":"com"},"ip":{"addr":"108.157.229.69","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.924Z","timestamp":1787500839924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.osano.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A4:48:A5:2F:30:67:9E:6B:49:27:13:CD:9C:15:C5:CB:40:2A:59:19","sha256":"DA:B7:49:E8:C1:48:66:E6:FF:FC:8F:CA:A6:15:48:37:F9:A4:F3:48:27:E6:EC:82:9C:C5:41:1F:7E:7F:85:5E"}}},"request":{"raw":"POST /record HTTP/1.1\r\nHost: consent.api.osano.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 224\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":224,"data":"{\"extUsrData\":\"\",\"osnoCustomerId\":\"AzZXI3TYiFWNB5yus\",\"osnoConfigId\":\"2016b368-eac0-4852-b001-c9fd9aaaaf77\",\"userConsentId\":\"376653a4-5a8f-4546-928e-13e550ab13eb\",\"consented\":\"ESSENTIAL, PERSONALIZATION, ANALYTICS, OPT_OUT\"}"}},"response":{"raw":"HTTP/2 204 \r\ndate: Sun, 23 Aug 2026 16:00:40 GMT\r\nx-amzn-trace-id: Root=1-6a8b1928-61ad77e25c87c84c5fa55099\r\nx-amzn-requestid: be9e0ca8-9bea-48b3-b0e0-b377d62a7c63\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Accept, Authorization, Content-Length, Content-Type, Origin, X-Requested-With\r\nx-amz-apigw-id: CkDeVHiTDoEEWJg=\r\naccess-control-allow-methods: POST,OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 973ba1a14b3ee409c424730df6f1e51c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 2X4G8SA4iAs9veGk6rCLy5JuiDze-PZIG3c7BJu8c-ekIrsq0_vy8Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1355,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.api.osano.com/record","fqdn":"consent.api.osano.com","domain":"osano.com","tld":"com"},"ip":{"addr":"108.157.229.69","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.926Z","timestamp":1787500839926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.osano.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A4:48:A5:2F:30:67:9E:6B:49:27:13:CD:9C:15:C5:CB:40:2A:59:19","sha256":"DA:B7:49:E8:C1:48:66:E6:FF:FC:8F:CA:A6:15:48:37:F9:A4:F3:48:27:E6:EC:82:9C:C5:41:1F:7E:7F:85:5E"}}},"request":{"raw":"OPTIONS /record HTTP/1.1\r\nHost: consent.api.osano.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ai.midnight-pd.org/\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ncontent-length: 0\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\naccess-control-allow-methods: POST,OPTIONS\r\nx-amzn-requestid: 0ee9c456-b190-432a-a684-d7d18edbbda5\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token\r\nx-amz-apigw-id: CkDeUEbHjoEEayw=\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 973ba1a14b3ee409c424730df6f1e51c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: rYvW9A3GJIV59oKsN6axZAd-BSOJN0ppN70i8P4p8MMC_YdvFcA8Xw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":586,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":48,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/icon0.svg?5db6923b1275639b","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:40.342Z","timestamp":1787500840342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /icon0.svg?5db6923b1275639b HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/f69bd4f51463c6e4e84022522038447b93da2aa1.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.74.8.246","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:42.831Z","timestamp":1787500842831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/f69bd4f51463c6e4e84022522038447b93da2aa1.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:00:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-B/6NfaaDpZne/g/uc5qfSnm44ZA\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1223,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1623b3b9e850c9c1491c70aef8d248c2","sha1":"07fe8d7da683a599defe0fee739a9f4a79b8e190","sha256":"b5b4d35c58c664f860fdab342e28e4f7337c31f56e8da3582e65972af84deb9e","sha512":"bcfb7323cde3f50f57c38880ba4f962f1f35f106a93074f2f3da73256fe2b54698c6065b11f1bc93d6f74811f6d2543fc6f5aa7afea2e5df1ff45b4f25fcc6d2","ssdeep":"","tlshash":"5321766d4a6822fd5245c7d6c5047a036bacdcb371003e7eea0d0a0e70db2e6223646b","first_seen":"2026-06-06T06:44:39.646667Z","last_seen":"2026-08-23T16:01:42.876697Z","times_seen":2524,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":2,"connect":24,"send":0,"wait":31,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/nspix(1).html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.604Z","timestamp":1787500838604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/nspix(1).html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":247,"mime_type":"text/html","magic":"GIF image data, version 89a, 1 x 1","md5":"d8b1e5906a77a303b516c9a0f3e4bcaf","sha1":"174178028c07150b75086abc291a5bb94601a89e","sha256":"2c366efc13702d5bf379b6d5d072ff66fe1d602a6c3185ddd6d6009390fea0f5","sha512":"ca8b77617006c2cfbfdea3432f2aa426ce739da9b5553a9a776f25ad7f7044cf33aa681491fae9fab9583907cad35f79733d2d8ea6cd96c0b680d7c586bf0540","ssdeep":"","tlshash":"17900443c5f00353c5f1c3700d350301174170551504034d414d3175dd171711c1c415","first_seen":"2023-06-05T21:21:15Z","last_seen":"2026-08-23T16:01:42.832752Z","times_seen":154,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/saved_resource(1).html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.518Z","timestamp":1787500839518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/saved_resource(1).html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149,"size_decoded":354,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3c2ccda97c47ede0b1c91b11efd575ea","sha1":"0a348c4b61c961aba7618f909beb87f740a81983","sha256":"97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50","sha512":"31afbe911abfda33a2948d14578ba290b604920983118ca5a6268a9906120ef365416e5e776ea685d648eef7a2ee2245f424829fdd4c7150d944f4bf673aee28","ssdeep":"","tlshash":"50c08cb52412200ba220aaa2dadde56408408010a04a8c82a04039ac65cc35ce8a3690","first_seen":"2023-03-10T00:19:37Z","last_seen":"2026-08-23T16:01:42.877429Z","times_seen":1360,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mid-night-pd.com/_next/static/media/b7ea2ab4a8ad1f81-s.p.woff2","fqdn":"mid-night-pd.com","domain":"mid-night-pd.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.521Z","timestamp":1787500839521,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/b7ea2ab4a8ad1f81-s.p.woff2 HTTP/1.1\r\nHost: mid-night-pd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"mid-night-pd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/remote.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.624Z","timestamp":1787500839624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/remote.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 123727\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":123727,"size_decoded":123950,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (543)","md5":"5710dad6271a9165f17934e672bb8ac4","sha1":"27883df4ccfa9ad3c1521b0b3ba3a7c0825b366b","sha256":"4fd00d63c35ce4eba964b2a5d4c85d890834d48043b1e4662188040cdb037a67","sha512":"b9637479157698f04228540de9af16dab54b6e693a31c194676d40403e833c59adc35872d3daa68502e6aa2a9d5c027616ce08078170f0bfbc62b4c5769bc2ae","ssdeep":"3072:2+/9NZ+j47HULFoCFp2PkPa3IBG44BLn3qsZP0xPljNN9ntsmpNw:2S9Oj47HULFZz2Pt3IBG44BLn3qsZP0o","tlshash":"5bc3c398b551b02132a3f4f9093f200a56372ae8a49c426c760aece35c7dd4e5677ff9","first_seen":"2025-07-30T13:06:15.598584Z","last_seen":"2026-08-23T16:01:42.878162Z","times_seen":466,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/js.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.631Z","timestamp":1787500838631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/js.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 130498\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":404093,"size_decoded":130751,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"24521e6f62178b5c63360a9eea77e736","sha1":"5fcb20f45cdbfb41683fd199db499e237b635a21","sha256":"facf500cbd0ae22813ec6277d11b49168c178fba5d1d72a43d9b7d7fd556f775","sha512":"40bd0e270f9008101b6a9b7413916efda118a1b9f3efcd42bc77be01c871065ad06d3ed62b8a0c6db69f30d0d6128be95e4746af5700b2172f0c48cf92958c59","ssdeep":"3072:MQNjExl/A4mwrcxZL/LGa6n07oHn5wdK8Oe/11LMHyqsS0cnGRWMukOFQt2Wc+LS:aGgcxZX7etZsSXLMukOFu2F+e2qZm24W","tlshash":"118419ce73d670269396f478503f018ba57b29a2f45cc899b189cce42e74a9a0177f7c","first_seen":"2025-10-23T04:16:55.073891Z","last_seen":"2026-08-23T16:01:42.880088Z","times_seen":6,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/nspix.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.603Z","timestamp":1787500838603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/nspix.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":247,"mime_type":"text/html","magic":"GIF image data, version 89a, 1 x 1","md5":"d8b1e5906a77a303b516c9a0f3e4bcaf","sha1":"174178028c07150b75086abc291a5bb94601a89e","sha256":"2c366efc13702d5bf379b6d5d072ff66fe1d602a6c3185ddd6d6009390fea0f5","sha512":"ca8b77617006c2cfbfdea3432f2aa426ce739da9b5553a9a776f25ad7f7044cf33aa681491fae9fab9583907cad35f79733d2d8ea6cd96c0b680d7c586bf0540","ssdeep":"","tlshash":"17900443c5f00353c5f1c3700d350301174170551504034d414d3175dd171711c1c415","first_seen":"2023-06-05T21:21:15Z","last_seen":"2026-08-23T16:01:42.832752Z","times_seen":154,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/4657-0ee3002512d36841.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.611Z","timestamp":1787500838611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/4657-0ee3002512d36841.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91829\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91829,"size_decoded":92051,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (46252)","md5":"12751b59074e6d9271f47c7d08174d29","sha1":"88ac97f44887e50f9b2f8f620799973e5bd03690","sha256":"b9f07c6dca9a08f9ccc5f7f0246e1358b1a89d96a92459d3b0cffbdaccad62fb","sha512":"6e27f81cb9241c2433d6e609a2a21210c622e761a9b2aaac1a4b1eb5edef2d1b80b638461f0ef27f5e684e69d73991429a19f2ceafdd2d0fa565f267394140be","ssdeep":"1536:Y+80MBRsZTUcK28zvgei3U9z7biRG4LrZdZe+Po2fg98DQ8yAHJHMnCHX8ktZlLR:M1BRNcK2Ovgei3Gz7biE4LVre+Po2fg2","tlshash":"ad93d8c9b6d2f02613a721b1443f000bf27e9a58644d44a8f2a4d8e67cb59cdd57bfb8","first_seen":"2025-10-23T04:16:55.446975Z","last_seen":"2026-08-23T16:01:42.881967Z","times_seen":9,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/5925-4166237618ab52e9.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.623Z","timestamp":1787500838623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/5925-4166237618ab52e9.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31496\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31496,"size_decoded":31718,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (31496), with no line terminators","md5":"f005e9303ffd0bc3af0d8bfa5241b52c","sha1":"6d3c108425d01cc374b586a1a95261fab90d0e32","sha256":"37f82f138746f163d45b89aed6ce6b8b7fdc308fbf49789fbfbae70bf4a113f9","sha512":"ec0009d6433337be84c15bf612910cbcd618715b2c0200d0dc09cac4b0006680d7079c786a5cc8ba3740f4ba0870baa56d136835bd45c8664432e4c94b42571c","ssdeep":"384:AkNfk9vLE8Ovw45ZvvtILugpcq+Dk8ICCKFltXkbn17S/Wli6rBc:XNfQvgXRPScq+D/+bn17S/Wc6dc","tlshash":"dee21e95f1a6eeace97b88d5942fc40cb11e7f4cce0ec8a4f8b868241d445d47a52bcd","first_seen":"2025-10-23T04:16:54.689029Z","last_seen":"2026-08-23T16:01:42.883759Z","times_seen":9,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/_next/static/media/b7ea2ab4a8ad1f81-s.p.woff2","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.635Z","timestamp":1787500838635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /_next/static/media/b7ea2ab4a8ad1f81-s.p.woff2 HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai.midnight-pd.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mid-night-pd.com/_next/static/media/0e96d314a90a6138-s.p.woff2","fqdn":"mid-night-pd.com","domain":"mid-night-pd.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.519Z","timestamp":1787500839519,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/0e96d314a90a6138-s.p.woff2 HTTP/1.1\r\nHost: mid-night-pd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"mid-night-pd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/f8e947071f9f1b8e361fedce5d26cc1180afc6d8-1788x1274.webp","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.546Z","timestamp":1787500839546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /f8e947071f9f1b8e361fedce5d26cc1180afc6d8-1788x1274.webp HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 16:00:39 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 02 Aug 2025 06:16:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28562\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28562,"size_decoded":28849,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5fe07c4e15cb2c194e0b9e5050fe11e","sha1":"bd9a187b225b0056addbe3666b544c441bd897ff","sha256":"34c501c2ab608588becab45d6a2c38e1af59a1ab36dedf3adb1f60df84e2a836","sha512":"d8e1e3e6326a51cf3f0301b7dd068e8b644852816f3dd71bd83aa167fad3997ca58be02ffd88a34432aca4c6e675482e95690b809192b240f94881cefc14cd50","ssdeep":"768:W9peI8aUNwQJObKbePM7v8OlOElm9oEJbvc1IkkIrpdL:W9pua1QEJPudlEoGbU1+c","tlshash":"19d2d1f7466a9a46dd001b3c9fddcb586ca340c9d16c47ea9d4b9b144b8f33bd2d8026","first_seen":"2025-08-11T16:38:13.717904Z","last_seen":"2026-08-23T16:01:42.886837Z","times_seen":10,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/817-a15fea2970392d77.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.612Z","timestamp":1787500838612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/817-a15fea2970392d77.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 42674\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42674,"size_decoded":42896,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (42674), with no line terminators","md5":"f06675485df8ef99cde78648177f9d13","sha1":"e2dd0fa9dbb8efd218b34df426ec917f62b8319c","sha256":"3064c45f3be0adb7e48cb84ded1b9b79369c0d23c0f9829cf4974948127a060f","sha512":"234e2dbb5f05de376f0d28b704c650b9dcadcec6be8ed615ed6728057ec989349f055bca0daaf9b0096b8f51cc30e2c8be34b92bdfdeb547d4cb7e8aa75f1cd5","ssdeep":"768:jx493Q/ytBbyfZmIJ7YRnKOx7FW4THj1c5lybL:297tlyf8RnK6FdalybL","tlshash":"041309b771d1f8e253db44a0843b100ef27a1d7a241ea144b3b5ccd5f6a05ada1a3f7a","first_seen":"2025-10-23T04:16:55.171015Z","last_seen":"2026-08-23T16:01:42.888624Z","times_seen":9,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/_next/static/media/c7f848bed9dd25a3-s.p.woff2","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.636Z","timestamp":1787500838636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /_next/static/media/c7f848bed9dd25a3-s.p.woff2 HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai.midnight-pd.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.638Z","timestamp":1787500838638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 05 Nov 2025 11:58:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 567\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1239,"size_decoded":823,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-23T18:39:33.975294Z","times_seen":424639,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/e443e028434d32e9179d9b4a188eceafe102b5c8-1788x1274.webp","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.548Z","timestamp":1787500839548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /e443e028434d32e9179d9b4a188eceafe102b5c8-1788x1274.webp HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 16:00:39 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 02 Aug 2025 06:16:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33108\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33108,"size_decoded":33395,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec0d6f9615292bd955314e8ceb8a1a1e","sha1":"56b46e9ee621d0c401b48efd257c9cc2c1b1f280","sha256":"d1dc04b860d26bbdfbca499797ec1b4e304957c0ba737949854ae12569180248","sha512":"4a9340bb2c177ad489555690cfb5260b9fcb43105f20392935a2658fa47a5082deeee0abc0f264b2e6a4bbecbb8db042fdeb0b08a6a919ad2ec003b099602069","ssdeep":"768:Qkap9vDWXeWryHcMIVJtk7RbzmUEZ5X44+CoIryAPX3Tee4PE:QR9vC1GFIMbSUqK4+C9rx3Tee4P","tlshash":"fae2e1410290bee9f30e94252fde9a1ce2282472f44c65801a37ec72df67cedd64297b","first_seen":"2025-08-11T16:38:13.679725Z","last_seen":"2026-08-23T16:01:42.891719Z","times_seen":11,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.731Z","timestamp":1787500839731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:27 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 355812\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":16365,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-08-23T16:01:42.893723Z","times_seen":341788,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":36,"dns":1,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/embed.js.download","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html","date":"2026-08-23T16:00:39.744Z","timestamp":1787500839744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/embed.js.download HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/index_files/Nn39DYe1otU.html\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sat, 02 Aug 2025 04:43:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33660\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33660,"size_decoded":33882,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"63ec9f60ea2990a0f7295611655033fb","sha1":"af5abfac40f0a6f7172eb72ae7bdbd515284edff","sha256":"6ee9b581c1f6b5ac31c4d6cd69741652b058375541fae0858b49454af19f03b3","sha512":"fd33c7fe72ac6d06e8667f99e68afc4356b2cbac799a5ee54ae11c364ba4d9cacac7ca1dcac28b7b55a0b28dbd74f95f96391c82f6e7eaa0fc66ee6ef3999535","ssdeep":"384:tYRgyq+e8v2cAKicdwxEUbWu9u0fdypHBZgnj/XNtaKyVlf/MFbbXRZWeUpppJFu:V+1v22UEUbpu0EjGh1olX2H6pA","tlshash":"f5e2e54e37e0e4249565e1ea1c0b2104633b94dd18e0a3ac763eeefa2d75d18b43af75","first_seen":"2025-07-30T18:59:23.411352Z","last_seen":"2026-08-23T16:01:42.816021Z","times_seen":599,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/_next/static/chunks/app/%5Blocale%5D/not-found-64d5832746b296cf.js?dpl=dpl_4jWMjBT1rHL9DiRCa4Gxba4iJVij","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:40.723Z","timestamp":1787500840723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /_next/static/chunks/app/%5Blocale%5D/not-found-64d5832746b296cf.js?dpl=dpl_4jWMjBT1rHL9DiRCa4Gxba4iJVij HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 23 Aug 2026 16:00:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-23T18:37:35.223559Z","times_seen":151966,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:46.319Z","timestamp":1787500846319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ai.midnight-pd.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 16:00:46 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: kwJxPdOwA9D0ms1EJhdt1G0fJ0hVf99JSysAgl3gdjqzSVuvwZDPt5RBGe3sMu6dVtAC7jc\r\nx-77-nzt-ray: fdb541234a9bb6db53198b6a02c1f012\r\nx-77-cache: HIT\r\nx-77-age: 4087803\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8208,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-08-23T18:45:45.905338Z","times_seen":3662,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/pixel(1).html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:38.640Z","timestamp":1787500838640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/pixel(1).html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 170\r\ndate: Sun, 23 Aug 2026 16:00:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":277,"size_decoded":420,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"edb377166ae87d3b43280c1c4b9f2f5e","sha1":"28086acf1174dcc9e25390853e17bd6cea201172","sha256":"1577556bbd53f68f49f1a812559cf3dbeda741572ae835706b4b19868178229b","sha512":"19341ad01b905f9f2a30a6aa2376f9fb9fe1d029f96e0fb4210f6e9ee4828ca7b4c49807b8200eb5790fc8a3db50b88d63a5c048aea546bd9cb7a21727fd6626","ssdeep":"","tlshash":"add02b2b9d05aa39234680be94b4d139748d207856219807d18accad24f8ee15c9d9a0","first_seen":"2025-10-23T04:16:54.630728Z","last_seen":"2026-08-23T16:01:42.843227Z","times_seen":9,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/nspix(1).html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.064Z","timestamp":1787500839064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/nspix(1).html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":247,"mime_type":"text/html","magic":"GIF image data, version 89a, 1 x 1","md5":"d8b1e5906a77a303b516c9a0f3e4bcaf","sha1":"174178028c07150b75086abc291a5bb94601a89e","sha256":"2c366efc13702d5bf379b6d5d072ff66fe1d602a6c3185ddd6d6009390fea0f5","sha512":"ca8b77617006c2cfbfdea3432f2aa426ce739da9b5553a9a776f25ad7f7044cf33aa681491fae9fab9583907cad35f79733d2d8ea6cd96c0b680d7c586bf0540","ssdeep":"","tlshash":"17900443c5f00353c5f1c3700d350301174170551504034d414d3175dd171711c1c415","first_seen":"2023-06-05T21:21:15Z","last_seen":"2026-08-23T16:01:42.832752Z","times_seen":154,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.midnight-pd.org/index_files/saved_resource.html","fqdn":"ai.midnight-pd.org","domain":"midnight-pd.org","tld":"org"},"ip":{"addr":"198.251.89.161","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ai.midnight-pd.org/","date":"2026-08-23T16:00:39.517Z","timestamp":1787500839517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ai.midnight-pd.org","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 18:02:19 GMT","end":"Fri, 16 Oct 2026 18:02:18 GMT"},"fingerprint":{"sha1":"E6:41:96:D2:17:FD:3A:50:20:6E:01:6F:19:E0:9C:89:67:F2:5F:DE","sha256":"EC:C6:6B:C6:1B:23:41:12:40:D9:0E:8D:2A:5F:BB:B4:FA:C4:DD:85:20:AD:51:92:28:26:42:61:80:7A:5D:8F"}}},"request":{"raw":"GET /index_files/saved_resource.html HTTP/1.1\r\nHost: ai.midnight-pd.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai.midnight-pd.org/\r\nCookie: _ga_M47C6SYY2F=GS2.1.s1787500839$o1$g0$t1787500839$j60$l0$h0; _ga=GA1.1.946336205.1787500839\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 02 Aug 2025 04:44:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149\r\ndate: Sun, 23 Aug 2026 16:00:39 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149,"size_decoded":354,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3c2ccda97c47ede0b1c91b11efd575ea","sha1":"0a348c4b61c961aba7618f909beb87f740a81983","sha256":"97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50","sha512":"31afbe911abfda33a2948d14578ba290b604920983118ca5a6268a9906120ef365416e5e776ea685d648eef7a2ee2245f424829fdd4c7150d944f4bf673aee28","ssdeep":"","tlshash":"50c08cb52412200ba220aaa2dadde56408408010a04a8c82a04039ac65cc35ce8a3690","first_seen":"2023-03-10T00:19:37Z","last_seen":"2026-08-23T16:01:42.877429Z","times_seen":1360,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"ai.midnight-pd.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}