{"report_id":"7ab6b2e2-d6cb-4263-aa16-681f11e09cc8","version":6,"status":"done","tags":[],"date":"2026-05-18T22:05:50Z","url":{"schema":"https","addr":"crimsonagility9.xyz/#/pages/signin","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"crimsonagility9.xyz/#/pages/signin","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"title":"Login","dom":{"size":27518,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11781)","md5":"530ff7aa8b60d4c5e34a9a90d1142348","sha1":"3859fee3d5d95e78164af3874d6be82fd683305b","sha256":"bb924d8086a74d411948ea85abf46abd036bc2d6e32d2e898ea1df070e906133","sha512":"9c3b648931ec91c1ba428f35965f939d874ad6ca69ab2ec09e7106c76f6847b3b0481027946a83be7cd2a2afdec4e1e896b4988e5fe238369aa4b79b041fedd2","ssdeep":"768:bLtxKe63Y/v8IHFZ5s2izs2YKs2rpfrrxRco/7:b5G3AFZ5s2izs2YKs2rdrrxRco/7","tlshash":"63c2a532b04a342ab53bd9b4b4e18f2c3166c323c6020a5db7ac27764fc7cd56975b99","dom_hash":"domhashd8b5bce422faab61a187cd558040962e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"crimsonagility9.xyz/#/pages/signin","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T22:05:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"crimsonagility9.xyz","ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":1157769,"sent_data":6592,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6.baiye.im","ip":{"addr":"43.110.35.18","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-22T14:29:49.428666Z","last_seen":"2026-02-01T17:36:45.298659Z","alert_count":0,"request_count":2,"received_data":2147,"sent_data":1086,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xiaobai.tw","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-22T14:29:49.429993Z","last_seen":"2026-05-11T02:15:57.476415Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":938,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-05-14T10:07:40.469759Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/chunk-vendors.86f23591.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a94c88d3772cf7029e3fdc483f74c8c1","sha1":"7c4404019c43ad5e73d13474084f26db931280ee","sha256":"d0139214d19ab60135b9fef18c0a3a36d9f2c6a500323f9a387437d27b45843e","sha512":"4eb1af8a95434161334ae213e4b4006e3d4fb62ee71809ec0809444d3c0cfda81c049d3858d7b56f1d45cd6d5c90776c0fe3e65fbe85e128fcddb0f3cdea904c","ssdeep":"6144:I6tC/t9X3fkN+V4KFUXtwTf3nrb3L7vv0NTMfYEvm/40+Qh8J1vQzbe9WUsu4N:I1115UdwTfj7n0t1i0wvQzHUq","tlshash":"a305f78df282b0b607e760b5403f220bb2376959b40ac4d8f675e4d4ad7894e6227f7d","size":832353,"data":"","first_seen":"2025-10-08T08:40:46.222036Z","last_seen":"2026-05-18T22:07:24.500902Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/pages-article-article_1~pages-article-article_2~pages-article-article_3~pages-article-article_4~page~96b5c975.435f0ad0.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"724df9ae37cac63328c9b2439f7b6786","sha1":"79302bde92e80b72d053909438ae23ece7ffa470","sha256":"ef333693fa0cb0b765ee62854c76acdbb56132ea205704e23e71ec6d3436a15d","sha512":"0f2d3fb0a5f95e92efa15d4f3f45c4c276c007ac9505e07d040e2048eba1b03bca68221350e8625287926485db38205542851d2fd06dac749b44e59ff10a747a","ssdeep":"192:rHGLHYaE/G3M6Q4X4wLqXO375TqOcTulCYLGgpWEwy58y0iw7Pq:DLG3M6QOTqTulCYLG43w60Pq","tlshash":"5342d64db0d4f83e09877cd6029e111290efaf59c969bce6a7e1b1e19ab548cf019f1c","size":12635,"data":"","first_seen":"2025-12-21T05:40:55.489156Z","last_seen":"2026-05-18T22:07:24.498267Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/pages-signin.94e7ef5f.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"018e49122889d1b58e7130d5c8550f18","sha1":"a370468bb32ea7d7d7767418ca5f9a25b35655ef","sha256":"3eb42fec1e5b3511755f1d6b2ca6736a8bef74e98d5c318178f0da42c8f85eb1","sha512":"1a0317b67e3202e4506116b080bce2d3c8d3d67096d6c3de59d368f78db8017365d9c8137679d1d164b0bb083d7c19be68e9c8e3c1b6641ccbfbb5b06ce89b5d","ssdeep":"384:XURQCqsRlHttjNt8yJ9gF86dYDw1s9IJWUA:YqsTHttjb8O9gF86dE2NWUA","tlshash":"31b2fa29b0cab46b2957d874207f5f0c0036be99d811b985d7f1a1f04e66ecd226af6c","size":25471,"data":"","first_seen":"2025-12-21T05:40:55.475754Z","last_seen":"2026-05-18T22:07:24.488198Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/pages-contactus~pages-mission~pages-payout~pages-security~pages-signin~pages-signup.9d04106b.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65e382231353416bce23d2e12a0b6411","sha1":"79666d926e36005f30f797bd34a86f250c6b869a","sha256":"3818ffc36df5cd080b544e471b042a3c006b6bcc4db58d66979eb5dae430ddb6","sha512":"e6f756855ea9af81def45fa955502009049a437461ba327c92899b405807c3e33ad81739314256df0382ecc8aae72ab3fb917c3a370b1528a1a4995cec5b3a87","ssdeep":"192:qskBWlF4L1PI5RtYtPDEb1SfjChZZmYk681gR1oqaLKCBUm+iMaAHLXKv:aBq4FPDc1wUkzd","tlshash":"3862da49b1c870662e87a474607f5f0bd127f6d85c11ab58bbb1f1f08f866cf2066b29","size":14814,"data":"","first_seen":"2025-12-21T05:40:55.490187Z","last_seen":"2026-05-18T22:07:24.491095Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/#/pages/signin","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec0086722d72ea95d1e97d455d135c91","sha1":"136c72ace1875c1206b274ca0cf24ed33a11d9a6","sha256":"9ea1492b35a3f52f61c72ab9690242149455b8068d149dff181d54532437f552","sha512":"a6377bb19cce90e385c3cd941eaa1ae27e18d70e1ce90f4e2e5cf5a9c5141069539c442aeb8f5c8a13378a8acc1043c1e84bb2a8593ed6ee026e7303e97bad47","ssdeep":"","tlshash":"fce068c360aa294c0120801a304ac0032bba08b29ec149610c487ba58ab9e4bc46e859","size":343,"data":"","first_seen":"2024-11-11T19:54:28.271167Z","last_seen":"2026-05-18T22:07:24.515801Z","times_seen":683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/index.8f7e0e83.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6adaa3dd5efbe37aaf820566b51c0949","sha1":"1dc1b6138cd2829583f322bcdf1ab31ad089efa1","sha256":"f0e2bde7a1caf4b51ec7b343cabcf055618b2981d73cb6854594f7248be3a0a4","sha512":"2805d5c211161089c156d73b61ec3438229031bf48e59a4912c25a2d603cda2e2f3bd37e754a5b50169650b229cadbccba4568fadde65ba9516e93ee0e4cd452","ssdeep":"1536:5yn2b+W8YG5+13c/KnQhe6kbH9wjHLoUBrxj/gXxR0ZeGWujH5sujWPu6+:R1HQtxz2Q","tlshash":"93732a9931ca9f772553719a6cef643620613d9189cdf80183eaafdc9f4a34a8373b14","size":77252,"data":"","first_seen":"2025-12-21T05:40:55.464422Z","last_seen":"2026-05-18T22:07:24.502729Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-05-19T01:00:28.937941Z","times_seen":15409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"crimsonagility9.xyz/#/pages/signin","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T22:05:08.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 22:05:09 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k0aBRbLnTIXaQf6ybKZbRNOgPl2S6dAxz24avbnEfhRAo9WO%2F4%2Fku%2FJoppyI2X8pAnAXO6RXxlE%2B8Rcy3fepPdETBV6JBLGHBQgPqb7PTwDO4j6PyiRrUWnJuWbzvTK5y84LV%2Fga\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fde2960b9284e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":820,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (491)","md5":"fff9b5844e81bde510672d2fffe80acc","sha1":"4e3e5382e133ec8292e241ef909a6aefeb17f57c","sha256":"1856aed24255a69a1b2c934f422014df9804b5a1ee472964ebaaa1becd5e754a","sha512":"489a52a92a6bb8f4f17b5c7cb801bfec038b49b612eaca2ccdb0ea8e5b5a96e4258b5bb34973adf141aa545c0a2febe5daf348ad396b74fe0d0498c95ecbff0a","ssdeep":"","tlshash":"cb0152832c64e44d0b2084456477e52e9ce78db46ea198501cc52dbd45e0bcece3e405","first_seen":"2025-12-21T05:40:55.463514Z","last_seen":"2026-05-18T22:07:24.496782Z","times_seen":6,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":109,"dns":90,"connect":1,"send":0,"wait":540,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/pages-article-article_1~pages-article-article_2~pages-article-article_3~pages-article-article_4~page~96b5c975.435f0ad0.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:10.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/js/pages-article-article_1~pages-article-article_2~pages-article-article_3~pages-article-article_4~page~96b5c975.435f0ad0.js HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-315b\"\r\nexpires: Tue, 19 May 2026 10:05:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NBlNv5klOW%2BpyFrpRPf2%2FOryBEZzJ%2BvTE9LYRFnmKPcizMr87mNvjh%2BJJoEB8gLo6heZH9k0y6Y5elAJGVchwI6iuCYPJwOd5%2Fl5QSG5yN8wCd8r4jItanDYaNcw3PqatVqtgzg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde296edf375ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12247), with no line terminators","md5":"724df9ae37cac63328c9b2439f7b6786","sha1":"79302bde92e80b72d053909438ae23ece7ffa470","sha256":"ef333693fa0cb0b765ee62854c76acdbb56132ea205704e23e71ec6d3436a15d","sha512":"0f2d3fb0a5f95e92efa15d4f3f45c4c276c007ac9505e07d040e2048eba1b03bca68221350e8625287926485db38205542851d2fd06dac749b44e59ff10a747a","ssdeep":"192:rHGLHYaE/G3M6Q4X4wLqXO375TqOcTulCYLGgpWEwy58y0iw7Pq:DLG3M6QOTqTulCYLG43w60Pq","tlshash":"5342d64db0d4f83e09877cd6029e111290efaf59c969bce6a7e1b1e19ab548cf019f1c","first_seen":"2025-12-21T05:40:55.489156Z","last_seen":"2026-05-18T22:07:24.498267Z","times_seen":6,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/object_1/bar/bars1.png","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:10.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/object_1/bar/bars1.png HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-439a\"\r\nexpires: Wed, 17 Jun 2026 22:05:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BFM9irrrTtr06SIyWjQI1Ik9epjNRAtrdbQOzFkQSqLm0wQdIInIneAw1ouPMIg%2BeZ2aiHAyBnjWl9d5kfQ4NWGOihDGTZCxYkracjcpygm6QcnLJVHZpGI%2B4R20inz0%2BjY9RUs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde296eef3c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 183, 8-bit/color RGBA, non-interlaced","md5":"4de7f346a51a15fa0cf7b9fa687e53d6","sha1":"f8301e2cee7a899877496d88f9c5ef90e96555d1","sha256":"3dedb30f826e9bafe1b400fe95b4187da52855fb46973e01a979adddd17c59d3","sha512":"3e1ff9fc208ff6a66fdd5616956e6e4010424f74024941feaa56d0cb1d3d077f326f0d7553152ec12c540a95508f056b7ff93deb35d0b6685d8fce5b030460bb","ssdeep":"384:phrfw0+07aw8crnuf6hcFRXFv7ImSpV8uGpzm6cpUSoHOij:jw0nW9zRhfa8usypUSC","tlshash":"e472c0ceceb4b2cdc09901f249cf2386cd52fd12a7159e083d99576fc28099c565a73b","first_seen":"2025-09-22T14:30:00.276348Z","last_seen":"2026-05-18T22:07:24.508626Z","times_seen":18,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":768,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/object_1/bar/bar3.png","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:10.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/object_1/bar/bar3.png HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-1f7b\"\r\nexpires: Wed, 17 Jun 2026 22:05:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ecOIrjAhYT6HkRVO1dsbFP3k8G%2F%2FdUwAUUTWNYO80cEeyfkdbFpH66vFAgPhiz1w2VQ1S%2BXKFOaGjAbD%2FTms3%2BSiL6kv%2FU4edIN6iBZQagwZcxgtCEKZuleRpO63P8DRuHTi89hL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde296eff3e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 183, 8-bit/color RGBA, non-interlaced","md5":"cbe2e724254d9b39fcfea0042274bd96","sha1":"4eee9d6dece7894b442307a9f90f541f5b74b71f","sha256":"7eb1697bf237335559104709509d4278f766accc6cd994440e1b877e6b8ec791","sha512":"784be10f91269bb3286fb8971624a702a846b0cbe48c5edc95272a31c3ff5eed6e76f7e2522389044d8f986d9b4b8f9ce3d026adb03641c4b89d666329eb09e3","ssdeep":"192:pNZW450WlOtRMskXSXIMJhX3hRVUdTi+MwLOP0E:pNKWlOAskiXIMrXxRV6T7acE","tlshash":"3bf1aff0eb93c2ced59059324bc953f1b54285627192e7263364502e8f0677b459f6c5","first_seen":"2025-09-22T14:30:00.288313Z","last_seen":"2026-05-18T22:07:24.48549Z","times_seen":18,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/object_1/login_ke_fu.png","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:11.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/object_1/login_ke_fu.png HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-1a30\"\r\nexpires: Wed, 17 Jun 2026 22:05:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5t1mxWyfda%2B7YidFYfUArEZjZ9Y%2FSqqwFfXGycLKzjeFqYLYzCTIOJnGgCqdBF7g%2Bu2licdRkxU1mSLA1stAmOu78KEDXki8lGq6c3y1NE8Jkk9x8tuwImDV15IQMFnScRzoCo5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde297328085ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"faf297a46fc457f6eac8ca04a769a0c0","sha1":"fc7c98f0aa5155c42f9d2efe76d6c1704fbaf223","sha256":"186765a7a58997b7fdb7c7283ed9c7d9e3f22ab2365de36f23f6b30c494e04d8","sha512":"e36fe7c744099df6023715edbca2c13d5ea47ffec166cc0897ddd36e7bbb805ba80611fb12fe09af88fc38466e6dfac7a7a87b62908c3a93aca9c5fddf19746b","ssdeep":"96:58ryPHcCUFOUaUqmf67Wf+YVtlu84DB1tLpjnPvConiHuUG0EYA32xa:iOb38qR7WGx849jZnCrH0Gxa","tlshash":"dcd19e04ea644fc578db0eeeace0d8017d609e6585b61824331f68af2b811b6bcc38c9","first_seen":"2025-09-22T14:30:00.280296Z","last_seen":"2026-05-18T22:07:24.515163Z","times_seen":18,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.baiye.im/sdapi/index/getServiceData","fqdn":"6.baiye.im","domain":"baiye.im","tld":"im"},"ip":{"addr":"43.110.35.18","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:11.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6.baiye.im","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 15:53:38 GMT","end":"Wed, 08 Jul 2026 15:53:37 GMT"},"fingerprint":{"sha1":"E1:0A:1C:37:02:1A:35:C4:A3:09:45:E5:B6:70:ED:BC:A6:6B:BE:8C","sha256":"3E:4C:16:A3:A8:34:AA:61:1E:60:07:11:65:DD:1B:18:B0:14:35:A4:CB:5C:EF:E8:4A:05:2B:05:59:60:12:76"}}},"request":{"raw":"POST /sdapi/index/getServiceData HTTP/1.1\r\nHost: 6.baiye.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 21\r\nOrigin: https://crimsonagility9.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"token=\u0026language=en_us"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 22:05:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: sdec0a16b=slftrf3v8s5ear0qmduehe3jfl; expires=Tue, 19-May-2026 02:15:12 GMT; Max-Age=15000; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: https://crimsonagility9.xyz\r\naccess-control-allow-methods: GET,POST,PATCH,PUT,DELETE\r\naccess-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With\r\naccess-control-expose-headers: User-Token-Csrf\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c131fdd149cfa8f0f5fd9db01c23fe52","sha1":"66c5c99e32469346ec7c5a65997086e5be3c3430","sha256":"962af94664c7d637275b5a07ffabb7e94f103986851c0bbd0de998afea75c3f9","sha512":"4ddb8bd674b07167ccfbf4fc3d224091ee44ef26610d61c94647e9c0eb38618cb5f6c1b8c094d66311438800979e0fa42904dba1610bdd0fdbb493c05bd29aed","ssdeep":"","tlshash":"a6e0d86707eaba2189cc66d03c861229d24136074d909491121bee74583d544b25daa6","first_seen":"2026-02-01T17:36:50.299724Z","last_seen":"2026-05-18T22:07:24.513287Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1704,"timings":{"blocked":636,"dns":284,"connect":184,"send":0,"wait":430,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xiaobai.tw//upload/52c63f45fc6b9d47/32f7f76e64e94e83.png","fqdn":"xiaobai.tw","domain":"xiaobai.tw","tld":"tw"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:12.697Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET //upload/52c63f45fc6b9d47/32f7f76e64e94e83.png HTTP/1.1\r\nHost: xiaobai.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T01:11:17.249979Z","times_seen":15414226,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/index.883130ca.css","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:09.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/index.883130ca.css HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 06:05:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0414c7-1793e\"\r\nexpires: Tue, 19 May 2026 10:05:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5vC6l5LlfOzWydleiTHpGyYsaCOOBy1l5D%2BW0J4c6nHTJlnRx7a7G2P0Uhidxir0ohJ%2BYOW5fu30MKh4Erl8t1C4DwyDALWhsEeVZXuQDHmgwYjXn6am1KvzZRMiMrIVRlnxNHn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde29655e495ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2de2f2d3943b4b382a28a439daff5939","sha1":"70d04e1c3567cb4f248b29046b98386f215a4d38","sha256":"8a35934d019c2b120a31ae6c51c75b2327f22637824b2a2c2faf4ce17ae9d4d8","sha512":"eba9271e30d6e4b21954078e3ccd839a55e1dcc8212fa375c18dce42104d19a92655c2f289401525b0c9565971a31573b928666515a3ca89b1801bbd48c1de95","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:VApuK7hmVrS1Wu3iG41nrPI","tlshash":"f393f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-07-20T12:48:29.443135Z","last_seen":"2026-05-19T01:00:28.903882Z","times_seen":2519,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/index.8f7e0e83.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:09.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/js/index.8f7e0e83.js HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-12dc4\"\r\nexpires: Tue, 19 May 2026 10:05:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNJ7SKAdveLmlr7U0utTBmHp7gOag1agKC2MGenqMWXmpM8gfNklas0QHAMnm8L5wxDwQqDHtQ%2FwJy4VBt2kNOvj991IQfn%2B0xFGbcqZb3mrVBxc8nxIXnySZXx0oJJ12EmNSnoA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde29655e4b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56948), with no line terminators","md5":"6adaa3dd5efbe37aaf820566b51c0949","sha1":"1dc1b6138cd2829583f322bcdf1ab31ad089efa1","sha256":"f0e2bde7a1caf4b51ec7b343cabcf055618b2981d73cb6854594f7248be3a0a4","sha512":"2805d5c211161089c156d73b61ec3438229031bf48e59a4912c25a2d603cda2e2f3bd37e754a5b50169650b229cadbccba4568fadde65ba9516e93ee0e4cd452","ssdeep":"1536:5yn2b+W8YG5+13c/KnQhe6kbH9wjHLoUBrxj/gXxR0ZeGWujH5sujWPu6+:R1HQtxz2Q","tlshash":"93732a9931ca9f772553719a6cef643620613d9189cdf80183eaafdc9f4a34a8373b14","first_seen":"2025-12-21T05:40:55.464422Z","last_seen":"2026-05-18T22:07:24.502729Z","times_seen":6,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/pages-contactus~pages-mission~pages-payout~pages-security~pages-signin~pages-signup.9d04106b.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:10.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/js/pages-contactus~pages-mission~pages-payout~pages-security~pages-signin~pages-signup.9d04106b.js HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-39de\"\r\nexpires: Tue, 19 May 2026 10:05:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHxdb%2F1WjQbS985BeTjiZg1clobjDHxtMtcDhY5J3lwY33clo7cTidVtGn7i4ilSkXZ%2FJONOfon8bcRO74cAZ2Nt7zMwCR4OaQtoK4tyzXO5OAtWphlIhSog0AU8aRfdNWP8PwXz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde296edf385ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14814), with no line terminators","md5":"65e382231353416bce23d2e12a0b6411","sha1":"79666d926e36005f30f797bd34a86f250c6b869a","sha256":"3818ffc36df5cd080b544e471b042a3c006b6bcc4db58d66979eb5dae430ddb6","sha512":"e6f756855ea9af81def45fa955502009049a437461ba327c92899b405807c3e33ad81739314256df0382ecc8aae72ab3fb917c3a370b1528a1a4995cec5b3a87","ssdeep":"192:qskBWlF4L1PI5RtYtPDEb1SfjChZZmYk681gR1oqaLKCBUm+iMaAHLXKv:aBq4FPDc1wUkzd","tlshash":"3862da49b1c870662e87a474607f5f0bd127f6d85c11ab58bbb1f1f08f866cf2066b29","first_seen":"2025-12-21T05:40:55.490187Z","last_seen":"2026-05-18T22:07:24.491095Z","times_seen":6,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/area/en.png","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:11.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/area/en.png HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-c69\"\r\nexpires: Wed, 17 Jun 2026 22:05:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7H75QCIE8INNZq2ZHshVGtB4MGZ4%2FhwL8%2FqNcZtTws8kz247EdggvNua8P8fICBvCngGbrHNhDDSxXndcOsUvyBKPuPd3Su83R8QoQ0Re%2Fpk%2BKCzAz8D6AdCZWObnaitSU7PhF7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde297328075ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 58, 8-bit/color RGBA, non-interlaced","md5":"21eef5e61d10e1bf22d84c552cffefd3","sha1":"7b9dfa0691d6ddb639f4be6b4d3c476925e40482","sha256":"e72b2d50a151681c8af47300bd201089267fa7483befdfc11729c4e57fdf2b71","sha512":"2903cbbd2929ecf8b63a27ba28ff3b08d1012419d605c2c82d5730eabf9546b5f42f5ea2caf4ae079f8b104a3afc3c60284cc5d5263496382ed2bbd6edffc833","ssdeep":"","tlshash":"43615d6ad39ab602da39023a42332658ee31d93b1802c86d56a9f6b9d11b745765f402","first_seen":"2025-09-22T14:30:00.327463Z","last_seen":"2026-05-18T22:07:24.495504Z","times_seen":16,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.baiye.im/sdapi/index/getAppInfo","fqdn":"6.baiye.im","domain":"baiye.im","tld":"im"},"ip":{"addr":"43.110.35.18","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:11.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6.baiye.im","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 15:53:38 GMT","end":"Wed, 08 Jul 2026 15:53:37 GMT"},"fingerprint":{"sha1":"E1:0A:1C:37:02:1A:35:C4:A3:09:45:E5:B6:70:ED:BC:A6:6B:BE:8C","sha256":"3E:4C:16:A3:A8:34:AA:61:1E:60:07:11:65:DD:1B:18:B0:14:35:A4:CB:5C:EF:E8:4A:05:2B:05:59:60:12:76"}}},"request":{"raw":"POST /sdapi/index/getAppInfo HTTP/1.1\r\nHost: 6.baiye.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 21\r\nOrigin: https://crimsonagility9.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"token=\u0026language=en_us"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 22:05:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: sdec0a16b=6vtbbkbe9r192p0f8bluji96vd; expires=Tue, 19-May-2026 02:15:12 GMT; Max-Age=15000; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: https://crimsonagility9.xyz\r\naccess-control-allow-methods: GET,POST,PATCH,PUT,DELETE\r\naccess-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With\r\naccess-control-expose-headers: User-Token-Csrf\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":301,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8709ee9cea3b63fbb6e615c7f6df98a8","sha1":"05df46cbc5775c93123645e1c3c09b9ae29d03be","sha256":"0de3977376cccca0ff15523cdc11b58d9ce61aed9e81c00b543002fb800b06d2","sha512":"f46ac4edc22935a5a2288a095044497bfcc46b7aa61da51a552ae65d35cf6e7ff7b5253f7ff9343fb1b1e1291bb3510c7f0a043794dafa7777a87082ab27ca18","ssdeep":"","tlshash":"0ce0e7f7c180c41c42483ac90c49643e86c91c2f0c487f409bbd0c4bc27017d704f534","first_seen":"2025-09-22T14:30:00.294713Z","last_seen":"2026-05-18T22:07:24.498927Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1713,"timings":{"blocked":642,"dns":283,"connect":187,"send":0,"wait":427,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/assets/fui-icon.a4e4f91a.ttf","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:11.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /assets/fui-icon.a4e4f91a.ttf HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 39840\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\netag: \"69202874-9ba0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QttODniHHhuA3t%2B8BQ6wXl%2BSruiTO7nAENNuDSdEgyE%2FZSiSPR%2BVZtI2xONqyDpXsKge6n8vqPwtxgwL2oMUmdtlcEBWJCPS3mZ0qRy3iC8W2aRfRMzlda99g7WPdJUCKY%2FwugHE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fde2972fff35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39840,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Created by iconfontfuiFontRegularfuiFontfuiFontVersion 1.0fuiFontGenerated by svg2ttf from Fonte","md5":"a4e4f91aa667ac9efcbca9350ee20585","sha1":"b893a5bd6af738f049d66377387f20251015a39a","sha256":"9165208c3c2060bae6d8746c50acb129119ba4f55d98515cd3f082cd0b69775e","sha512":"7ac27dee17bdeff7df250bc7acbabaa20f65575f15ddf1f7bf16421e61320a5ad3e5e58d9744abb5f47eb8bde7eb4f8346b9ec4e53083c5a2a479f97f7d4eda7","ssdeep":"768:KNNFsXekphznzGbXQNwRWD9Axlo9bhaSNnB9tqpDs5ej0RAlxbrEM1jRlpl5VQPM:smXecznzGbXQ2kD9Axu9bhaSNnB9tqpf","tlshash":"f5035d78535d5ffaf6b843bf44638191d4bfb701d888dfab6505912a080bcb61260afb","first_seen":"2024-08-19T20:00:00.815296Z","last_seen":"2026-05-18T22:07:24.514589Z","times_seen":75,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":740,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/favicon.ico","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:12.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/favicon.ico HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:13 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69202874-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BRQiZwx6XUTK5l9nRbrkm1RYWESIevSzBfu%2FBefPlAgIy1q9LoZIYz51IDNxh0gGuVOtDpiYozU%2Fn9cMp2uv5jSiW8FIYN9i0FYtgo8XHI4wLQn8tG5S98lVm%2BGQ7pLADg%2BOrlp\"}]}\r\ncf-ray: 9fde2978f8c15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"eb2768718d0e26ba4dcf1e4197870f53","sha1":"0187487df8d075c33bc0c5c9330e904e7e1f5337","sha256":"79e4cf316ded22b4ce67afc1e60a9b454bf25c1446c851fd763ad37e0446d160","sha512":"acc040af76c60912836a233f43f5d4cdbf22e0fe46b91995a4c31e5e7461a8d4c9b8ff095f7507b132794f4705ded51b023be10ff8a018d1abc33f7021c3efc1","ssdeep":"24:suK89anhpwa4qqPa12R9Mia4qqMWalZnmMdY+Q83Wa/aO8Y8L3aWRdaWC9a03krq:PahpS69rZPP8LTJRu0rn5SIo","tlshash":"e791fff35644ac65d45a1a7c4232d6bed6bf6e9c6931f20219e6fc3b7e362c21880c43","first_seen":"2025-10-08T08:40:46.19674Z","last_seen":"2026-05-18T22:07:24.504671Z","times_seen":13,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":539,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xiaobai.tw//upload/6c0a348347cd6cdd/92845fb6a83cff57.png","fqdn":"xiaobai.tw","domain":"xiaobai.tw","tld":"tw"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:12.705Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET //upload/6c0a348347cd6cdd/92845fb6a83cff57.png HTTP/1.1\r\nHost: xiaobai.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T01:11:17.249979Z","times_seen":15414226,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:13.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 22:05:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Tue, 19 May 2026 15:05:13 GMT\r\ncache-control: max-age=61200\r\nset-cookie: __uni__uid=rBEQRWoLjRkad3jkAw1cAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-05-19T01:00:28.912854Z","times_seen":15716,"resource_available":false,"data":null}},"time_used":1434,"timings":{"blocked":597,"dns":1,"connect":238,"send":0,"wait":238,"receive":1,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/chunk-vendors.86f23591.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:09.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/js/chunk-vendors.86f23591.js HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-cb361\"\r\nexpires: Tue, 19 May 2026 10:05:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FMcoC0rXHlffwdEurawzE%2FumrXOxOzhAhHaV7pAMw80KYM%2FrA3k4GcgzxmNIyQlWWxue4jtHLTQnp3WMgjz31Sa7njA6rgu8FNLDuXbNKxCgrvE2G0yK9tUFzhoO7zbSn1WPdCF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde29655e4a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":832353,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29646)","md5":"a94c88d3772cf7029e3fdc483f74c8c1","sha1":"7c4404019c43ad5e73d13474084f26db931280ee","sha256":"d0139214d19ab60135b9fef18c0a3a36d9f2c6a500323f9a387437d27b45843e","sha512":"4eb1af8a95434161334ae213e4b4006e3d4fb62ee71809ec0809444d3c0cfda81c049d3858d7b56f1d45cd6d5c90776c0fe3e65fbe85e128fcddb0f3cdea904c","ssdeep":"6144:I6tC/t9X3fkN+V4KFUXtwTf3nrb3L7vv0NTMfYEvm/40+Qh8J1vQzbe9WUsu4N:I1115UdwTfj7n0t1i0wvQzHUq","tlshash":"a305f78df282b0b607e760b5403f220bb2376959b40ac4d8f675e4d4ad7894e6227f7d","first_seen":"2025-10-08T08:40:46.222036Z","last_seen":"2026-05-18T22:07:24.500902Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/js/pages-signin.94e7ef5f.js","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:10.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/js/pages-signin.94e7ef5f.js HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-637f\"\r\nexpires: Tue, 19 May 2026 10:05:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCg3BG3J%2BN70h98uOBrbm75TomAjAudAzq%2FV6tBN6iyqpOLkxqN4yxu493NWLGGhNGQIR%2FgHbS3MgPLLeDRMslH%2FKfYZEZPkB5dZNQvXabX1VjyOfSG%2B1kJ5sUVRgO7wxcGveYd7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde296edf395ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25471,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24861), with no line terminators","md5":"018e49122889d1b58e7130d5c8550f18","sha1":"a370468bb32ea7d7d7767418ca5f9a25b35655ef","sha256":"3eb42fec1e5b3511755f1d6b2ca6736a8bef74e98d5c318178f0da42c8f85eb1","sha512":"1a0317b67e3202e4506116b080bce2d3c8d3d67096d6c3de59d368f78db8017365d9c8137679d1d164b0bb083d7c19be68e9c8e3c1b6641ccbfbb5b06ce89b5d","ssdeep":"384:XURQCqsRlHttjNt8yJ9gF86dYDw1s9IJWUA:YqsTHttjb8O9gF86dE2NWUA","tlshash":"31b2fa29b0cab46b2957d874207f5f0c0036be99d811b985d7f1a1f04e66ecd226af6c","first_seen":"2025-12-21T05:40:55.475754Z","last_seen":"2026-05-18T22:07:24.488198Z","times_seen":6,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crimsonagility9.xyz/static/object_1/bar/bar2.png","fqdn":"crimsonagility9.xyz","domain":"crimsonagility9.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crimsonagility9.xyz/#/pages/signin","date":"2026-05-18T22:05:10.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crimsonagility9.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 17:23:40 GMT","end":"Sun, 12 Jul 2026 18:21:47 GMT"},"fingerprint":{"sha1":"67:0F:EF:5B:98:00:70:85:67:4A:61:03:C9:BE:52:A0:98:7C:FB:D4","sha256":"B4:44:A8:AE:41:DE:61:A1:6D:34:9A:5C:5E:E4:D5:C0:99:E8:58:E8:EE:69:7B:F7:BA:57:E3:1F:F1:B4:F5:46"}}},"request":{"raw":"GET /static/object_1/bar/bar2.png HTTP/1.1\r\nHost: crimsonagility9.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crimsonagility9.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 May 2026 22:05:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Nov 2025 08:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69202874-1dbf\"\r\nexpires: Wed, 17 Jun 2026 22:05:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bwiy06Pbm9RZ6kfUQSlQzo3ldU9jeK6%2F5I3lS7DA4zbpofq3Sv29boB%2FzsfFtjsVyTzWP%2BJm%2B6h2AWQ3w31E8wcTU3C3J5oRw6iAZSZGWP%2BjtJbJtPs4hRTHuXqB%2BPom2bIWAtVA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fde296eff3d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 183, 8-bit/color RGBA, non-interlaced","md5":"facd7a5bdd3658c97883e16eeb8df04f","sha1":"7e9695fa238ceedc07ff1490af661951d790b03a","sha256":"af5eb699f473fe7f9ae600dd0a587430d65cf60cecefcfc2d3ab501f6c065ad7","sha512":"650defd1d1c6473235e9111a00f2696fc35d377058200cecfccc8a9b4a4aca55e9d4976b25b1a22aea4b493b887b8674f2e481aa0c9b4030a08e55c0e6555cf8","ssdeep":"192:pz3S666cQPNm8DZjqaG08+by5uFzDRTXAy19d4OtXV6666i:p8QPD/txbyE9DlQyWOt4","tlshash":"b8f18e10457c1a86fbdee939c8e864a35c3ae0006b6e47217bfd83eb07154d763ad55c","first_seen":"2025-09-22T14:30:00.318073Z","last_seen":"2026-05-18T22:07:24.509413Z","times_seen":18,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"crimsonagility9.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}