{"report_id":"7b5b8db0-d828-4b04-acb9-4915e6d4bcca","version":6,"status":"done","tags":[],"date":"2025-10-26T17:43:26Z","url":{"schema":"http","addr":"abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"title":"abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","dom":{"size":147,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"e888a60d00f950f7907663089827900e","sha1":"5bc43a96d0eab230d6770732716ac0cab614fd1f","sha256":"4113188fb5fd92e5edfff6c341106eb0bed5c9a3c6a17acb28355dd9386fdad9","sha512":"359077268010cbd347d897cd869f0c6dad2cd1dc880066029da00e6a9791476067f8187de60ea2aa541c8ca76a78a1108c923d8e385b49ba1fa965d8c038ce71","ssdeep":"","tlshash":"bcc02bbf1404250bf32079c1d8822214bec04044e03b1c14fbc188b4c0c424cc086a90","dom_hash":"domhashc1fec9cafeadbac0b33c1409ff211c3f","first_seen":"2025-10-26T17:11:34.222172Z","last_seen":"2026-08-11T21:01:44.375351Z","times_seen":4570,"resource_available":false,"data":"PGh0bWw+PGhlYWQ+PGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJyZXNvdXJjZTovL2NvbnRlbnQtYWNjZXNzaWJsZS9wbGFpbnRleHQuY3NzIj48L2hlYWQ+PGJvZHk+PHByZT50dXJuc3RpbGUgdG9rZW4gbWlzc2luZzwvcHJlPjwvYm9keT48L2h0bWw+"}},"submit":{"url":{"schema":"http","addr":"abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T17:43:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"abstractx1.lol","ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-18","domain_rank":0,"first_seen":"2025-10-26T17:43:26.528353Z","last_seen":"2025-10-26T17:43:26.528353Z","alert_count":23,"request_count":23,"received_data":16244,"sent_data":9646,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FyRUhUp2PxryADG94lzCKglebGOZpmoV6ncdy1nyu0LvUDfHiCYFWOG%2BwjWGfVCGVjUBFy36xUaUI20PoXTfOpm23rrw6z6KOK%2FXpA%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc1003d78b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:05.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:05 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbvoZAbluVHRKDC1WWk6t2gZUUM9eU4odAEbcTT7EY8veWlReDBLw79mUgjteixqJZZ3ApIcLBbkjHN4p6xYufCbgVuxL0taweg4Qw%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc1006d7bb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://abstractx1.lol/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQjyhAl%2Bkd9UDoH%2B4vPc2zOXpiJLulZzFiv2uNBo9HDSk43I51Ml3dJMclRV4fN5GcjI3ZTrX%2BaTkmtZF%2FVLPXB2%2F4e%2FCDHLO7uNuA%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 994bc0fefc9356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XtD13pFBpW00XrmibalW8SpqgnGe454Wqj5DJP1akJFUV8EI%2F5uQ3TvLkjijgfwc4w%2FN%2FPBTGeqTTxgWFaFAqkrcYMh2K0x2XWGXQ%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ff5d5ab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uU%2Byt3jIrqw3Xq%2FQBMLqzOxqVMnkcVCwarrr8slIjoMf0ZOqlJ0WfXAGiHzuL1brLLP1plFMpRBj8auNPv448cVaNbWsS4IVEKrR3w%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ffad61b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6aL8dbhPNjw1zkATeRJnR3g%2FUlolI8dwCtl8rJLO0b17BefC2wJ2T1gewqqZpn42IQZyazVfPvS%2FsO4H97gwDKnpxqJExQnFJPuELA%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc1002d77b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:05.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:05 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwhIw%2B2N3RRQMjgxm46r%2FCf8%2BkMUfEXWueWzMccR62vXtYfAsyL6OBSB5CHI1Pg2SiNfpWdCzAefv3F%2Blwk2RRt2LKSiUpMckq7jEg%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc1004d7ab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKg5ElteglHLdhF58a510WNusWZOb1esFOoT9s%2BURm7uUi9ghA8KrasectgNJF3eBzf9KavBSk7NvHbzpK1Z4cUHCbH4RiVm57iXpg%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ff6d5cb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGj2RmaOOw%2BXGAsuFiGdEskaoKz%2Bi2OOsZ2CaG67HyyC%2B%2F7UJ1Covh0dwobMQJ0QLdznVFBFm53%2FzbESPRUjTc20Rj591Q4iSbWeUA%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ff9d60b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fk7J0EhGGm%2F3A46%2FE%2BM97aLIANNDm9rXJeqybYd5s9pvxYKbqm5uFyTQ%2Bvu2TSrQLRvfx0MrsoBvEZRpRIuD%2FteBi7n0CEq1PwHhOQ%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc1001d6fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T17:43:04.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response= HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\ncontent-length: 23\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bTLzJfiEH8gboR3ibObsdFL4lBatpPrdV2YEbM1NiX%2FqKMCncAm8uVMe3IbWz3C0tAHOZ8cuhFuwsD9sAruJWT73kPa6BGgoBZ2PQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994bc0fbcd2c56c4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1862a245f1f02bd4477a17e9432e3a25","sha1":"5e9e7ba669c7c6e7aa7aede335b0b22f0a08b88f","sha256":"e999e13afc2c76a9b3523daa037814a97f9ad5310ee32c4dfe3b5d006a0ed73b","sha512":"d9a8704b10b2897fa29358a36d8f8a180a97f1752ac745065c11ca1698055fd59415d32ac54e451a2237dc460d8a465ffacdbfc7009bf8e2f4fd885acc189e16","ssdeep":"","tlshash":"6b70000a0800320022000820002082a2af808080000000088ee2cce00808080a002220","first_seen":"2025-04-28T11:02:45.558882Z","last_seen":"2026-08-11T21:01:44.377345Z","times_seen":43326,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":59,"dns":41,"connect":1,"send":0,"wait":38,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://abstractx1.lol/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFroWNEe5MpOedbBnkn%2FqdGXD4L2o3vH12ZzwgkO5qniMXrqIkN%2FZ6xyYtBbhx7O2N5d1xSrR%2B%2B5gn%2FWwNA0BBL70Rvr30XBBYpsXA%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 994bc0feec7b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZzjfKngwyPJkSHSCDfiaepSocCfdDX1QlZYeLkm9nBYMznSWqRQJGTEY4gZt9UGVhZX%2FQwPupJWjL5%2BFnnD05NN7JkH21xlpMZMFA%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ff1d4db51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3I7%2FNxJrf0%2FGvDVYyYMzd2TjW%2FDf5qdm5GXVKpkfqMUwPgmN2OUqjHQgeiYX%2BiShQup%2BS6hHqDrX9K%2Fbd8izAh%2Fa7zxiFXVGLQ7pTQ%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ff4d55b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26xxnPIj7YhDz1Rn5dFuCektmSp1lT5cAt4O%2FX2UyoaGcBlgjHMWCMkOqG6uWm8aC3woM44TVZqY%2Fg2bMd6sm3e1XLlvZOGjr8CpmQ%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ffbd62b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQbATX%2B0B8bmYj6EFMMq8Imobyoac%2Bec9tjcRkiiFJybaPcy%2FS%2Fl8C3INC4iTN2mQvHQtCxkSkh0RVjYV3IT2huMXxzruZLEqok2PA%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ffcd63b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxzEfFzIVJsG%2BSQpIF7rNZxMZFnQ%2FJahYNzl2B2ywVW6eMX68e2GqZK2ZN3Y0N9ADoh7tiRM%2FxIe2cWGy6C262zG09KXgm4nknfOag%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ffdd64b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwJ9eJmC3Kz8YvYCZ0ZWrSzdYX1%2Bidbor64KZsWNYEIWL42heySNBFhg%2FO4ZWPKwJNFkb%2Fr4VIeg0DN8kcEU25RScoc9tE5hwCbJ8Q%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ffed68b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T17:43:04.484Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response= HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Sun, 26 Oct 2025 17:43:04 GMT\r\nContent-Length: 23\r\nConnection: keep-alive\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ki3aacl%2F8dpRrxP47%2F7KXV4S80BXhTMXE8aVVFwTBHKJUJkYVlLw6hLJZZEp42POVSHmCvDwUGmcU4nw5GRA0zdL0qa1tFb2OCQT%2BDF5\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 994bc0fd095f2678-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1862a245f1f02bd4477a17e9432e3a25","sha1":"5e9e7ba669c7c6e7aa7aede335b0b22f0a08b88f","sha256":"e999e13afc2c76a9b3523daa037814a97f9ad5310ee32c4dfe3b5d006a0ed73b","sha512":"d9a8704b10b2897fa29358a36d8f8a180a97f1752ac745065c11ca1698055fd59415d32ac54e451a2237dc460d8a465ffacdbfc7009bf8e2f4fd885acc189e16","ssdeep":"","tlshash":"6b70000a0800320022000820002082a2af808080000000088ee2cce00808080a002220","first_seen":"2025-04-28T11:02:45.558882Z","last_seen":"2026-08-11T21:01:44.377345Z","times_seen":43326,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.669Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 26 Oct 2025 17:43:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCross-Origin-Resource-Policy: cross-origin\r\nLocation: https://abstractx1.lol/favicon.ico\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnugOBKfk2sRnRNX5Ve3Lyyj%2B26OxP7PA26cyq%2Bb9uHD4wDBvlPUxxDWKbKY7g1HUjSSFHPkhgfGe600rbnAQlq90EZZ6KjVTv%2FKYyX7\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 994bc0fe2a702678-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://abstractx1.lol/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TL0Qi81hd%2F8ZvAZgxGimnhwAJd%2BvP%2BcoZYlOz3q1LBcy88EI6EuFM2cIamZWaJhQ7so0X5NoR58fScDrGm6eRUNHyj8FRKFXpdpc3w%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 994bc0fecc5e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=auh1F7%2FOQql3148B%2BtPpT68cuI4BdhiiiYLMcgvwcfifGjCZJRzFAlZ5uRje5vew8lCtn3%2B%2BE8FS53y8hNuDGUfmOlsiO8%2BxduN2%2Fg%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc0ff8d5eb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abstractx1.lol/favicon.ico","fqdn":"abstractx1.lol","domain":"abstractx1.lol","tld":"lol"},"ip":{"addr":"104.21.32.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://abstractx1.lol/cdn-cgi/phish-bypass?atok=HaGKcarV0xGCqYKhLm1qAadCVo2EQFExuTmNtJSZpsA-1761446394.5636363-0.0.1.1-/\u0026original_path=/\u0026cf-turnstile-response=","date":"2025-10-26T17:43:04.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abstractx1.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 14:57:29 GMT","end":"Mon, 15 Dec 2025 15:55:36 GMT"},"fingerprint":{"sha1":"85:89:3C:2A:F9:D3:35:0D:8A:42:A0:DC:5A:8D:EC:A3:BB:4A:91:98","sha256":"1E:28:65:E4:B3:C7:50:4F:62:E2:94:CC:1B:F7:62:AC:3E:BF:D4:B4:8D:6B:AF:7B:EE:B7:6F:09:FE:2F:6A:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abstractx1.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 17:43:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://abstractx1.lol/favicon.ico\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2zTIFYTaRT%2F%2Fd4RayB9AHY7f3Sstn%2BuztaUrVDlIDdIWEKjgDOd1Vdc95KJ2qIedNBuCQAUQ1yh8tR3mUOgYQqLY5qNaV%2BKmrEPcrQ%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncf-ray: 994bc1000d6cb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T14:40:50.607373Z","times_seen":17856705,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"abstractx1.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}