{"report_id":"7bd1a548-00b3-4814-8d1c-d4c07177c030","version":6,"status":"done","tags":[],"date":"2026-03-06T19:08:20Z","url":{"schema":"https","addr":"arbup.click/arb","fqdn":"arbup.click","domain":"arbup.click","tld":"click"},"ip":{"addr":"104.21.85.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"title":"Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets","dom":{"size":15207,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (358)","md5":"046dc39ad73be24a5b71d85d72b077a6","sha1":"b24f6ed303313a157f2733e816150ed4010aad31","sha256":"e85af687c58d6807699636ce1cb8823bdd18ab64c648a5b71abeb4d0f4b2f526","sha512":"408b2b94184ff15e7feadb7a85141a96f43c37cc577beaeec46546098c48fcfdc4f0e736ce05b0b1353d06a29c34f16148f54c468b2ae26ed7de44281b0497f6","ssdeep":"384:TSCKLCWgJZblUkVeDAt8iaIL6YuS65UTq1cSi:trreDziI5fli","tlshash":"3f62527655f20032429392893ba7576aab60d003e50bd9253fdd47c98fc3d8acea3b4d","dom_hash":"domhashdf6922961c5ad7303f9967c593412302","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"arbup.click/arb","fqdn":"arbup.click","domain":"arbup.click","tld":"click"},"ip":{"addr":"104.21.85.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T19:08:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"arbcore.click","ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-06T19:08:22.950845Z","last_seen":"2026-03-06T19:08:22.950845Z","alert_count":17,"request_count":17,"received_data":2644058,"sent_data":8167,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbup.click","ip":{"addr":"172.67.201.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-06T19:08:22.936881Z","last_seen":"2026-03-06T19:08:22.936881Z","alert_count":0,"request_count":2,"received_data":2400,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"arbup.click/arb","fqdn":"arbup.click","domain":"arbup.click","tld":"click"},"ip":{"addr":"172.67.201.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf8d2d678ef27077e589b27094e8b1f0","sha1":"2e4138ab453fe6e360a7ee38eeb2568acf445c14","sha256":"b85341901111a0ac0fe35bd76813cc931e6db3970c7750d9b06f82a0b23cbfe2","sha512":"e5969234506651292eae7eb767a017aac627d5f1f4415f7d742d88e0d67027c613395aff1b845686255653591dbf71daf85b6e522d718dfc7e5d36429bc5f58e","ssdeep":"","tlshash":"a1b0128eb16a22c51397a364117f6199623336de7f42c286744298423d3c10f555798e","size":116,"data":"","first_seen":"2026-03-06T19:08:26.817685Z","last_seen":"2026-03-06T19:08:26.817685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/protect.js?v=6","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37078474be98b7db76b5741fa1c1c764","sha1":"43c82d94f31f94d33c568ebb2f303168acba1db6","sha256":"8bf810837f8e8eb778abaa40e4ec6ae312b51d128d526667d8d76b9dfb58994d","sha512":"356e209edca144dc3efa1e2830138777b951a10740a530a1e8b46bc2ee12fc8cf0cf3f3cac511b9c5ee1e8c164f4702bf36ee4f09746df48c4cdc9ba28988051","ssdeep":"96:fwmr/gun3Ikb57Qz3XMFcuhlMb8U60qJWEa8YrxuBUH5dkeBSZSZSTCuhYb55n0F:J//n4ipq3cyuhlMb8J0q/a8YQUH5yeQh","tlshash":"11c1746a96c3047d3b63e06a9b9b73183c3a147b310b8d26744c3b691fd171246b6afc","size":6072,"data":"","first_seen":"2026-03-06T19:08:26.810139Z","last_seen":"2026-03-06T19:24:31.615893Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3f480df24714c980afc05ce90a62b05d","sha1":"09f10c8677e44ceb169a0aeb4c58bf347223ccaf","sha256":"55d6343882fb60b73989d6cdc23bcce6398bd8ae58cc5c67023144ed61835293","sha512":"b8d32565bcb7db7fe73aae6d7c4b870a5e8686e7f23fe809b7694b280e5c49b1ed39785c55e7052390064a1ec0b3c154c3d6963cd7cba8518bd1a42858ce8708","ssdeep":"49152:PakouE2DQwl6i8VdACUIyJtInhhfmQG5kD1R0GxtYZpZZSntPjyCytwD7lU4o9JG:Yi8VdACUIDgwSFLMTR+W8OJ","tlshash":"f5069db173a5b0a5479351d814671001f234a88ab00d80ecf7ecd9eb7fa99ca957bf36","size":3990541,"data":"","first_seen":"2026-03-05T13:46:43.425415Z","last_seen":"2026-03-06T19:24:31.624294Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/protect.js?v=6","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37078474be98b7db76b5741fa1c1c764","sha1":"43c82d94f31f94d33c568ebb2f303168acba1db6","sha256":"8bf810837f8e8eb778abaa40e4ec6ae312b51d128d526667d8d76b9dfb58994d","sha512":"356e209edca144dc3efa1e2830138777b951a10740a530a1e8b46bc2ee12fc8cf0cf3f3cac511b9c5ee1e8c164f4702bf36ee4f09746df48c4cdc9ba28988051","ssdeep":"96:fwmr/gun3Ikb57Qz3XMFcuhlMb8U60qJWEa8YrxuBUH5dkeBSZSZSTCuhYb55n0F:J//n4ipq3cyuhlMb8J0q/a8YQUH5yeQh","tlshash":"11c1746a96c3047d3b63e06a9b9b73183c3a147b310b8d26744c3b691fd171246b6afc","size":6072,"data":"","first_seen":"2026-03-06T19:08:26.810139Z","last_seen":"2026-03-06T19:24:31.615893Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba839b4884c72fed5bebc886815efcde","sha1":"d28a7e779ee4da37433a40f15ea3e3df5886c2ac","sha256":"c643a1a93bf1f2b1c2f70b4fc90b9c4e1c76680e0335877d281cdecf225eb839","sha512":"ba4a6a0eca87429a7d371f852d766264d4630a3621f928a78d01c495fc7bce5398cbcfdd39bc0b3bff555ec0eefcf578556bf97ba90b560eecefa944c2cb04f0","ssdeep":"","tlshash":"0ef04c2b14b200720237e756571baba5aa31405b34c3ec5d7e0e8a0a5f94e6508f089b","size":610,"data":"","first_seen":"2025-05-18T19:50:38.458372Z","last_seen":"2026-03-06T19:10:32.841424Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dba7f53600e040d426fe3d4e138b767b","sha1":"7cb89ecb211fb51e8e5e5cbb869b46e5e4a9812e","sha256":"7f1a8e8f2376ff30b4982da4f4eaf6b98f6e9c96c75f2883e7a52059d64eba7f","sha512":"d93f9b3e44284ede9a8deaa4c75dc46c03b71196622f8e12c685d81bc15b90c0e99dc3a862ad7a3d3ee5a9916085f28a351e3520187b1f108f55faebf1d426c1","ssdeep":"","tlshash":"d0f0a06921f625310733b629d71fa64972322013210cab153b4d46f15fb0ada06f2fcf","size":461,"data":"","first_seen":"2026-03-06T19:08:26.821402Z","last_seen":"2026-03-06T19:24:31.624916Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"arbcore.click/assets/index-vMRztd5t.js%3E%3C/script%3E%3C/head%3E%20%20%20%20%3Cbody%3E%20%20%20%20%3Cmeta%20charset=","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbcore.click/#bf0149139f2d46","date":"2026-03-06T19:07:59.155Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /assets/index-vMRztd5t.js%3E%3C/script%3E%3C/head%3E%20%20%20%20%3Cbody%3E%20%20%20%20%3Cmeta%20charset= HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:07:59 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BI304%2BeGVlEn5kj5%2FsVs%2FzhU3y1AQHpslziVAARDkc%2FtuAopyRvpRP4lnNEAlIppEzC1fB%2BXjrZqNjhm58V%2FndoysGTmTD08oYQM6A%3D\"}]}\r\ncf-ray: 9d83a57ebfd0a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/bg.jpg","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:01.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /bg.jpg HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/style.css\r\nCookie: _acc=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\nlast-modified: Fri, 06 Mar 2026 03:20:19 GMT\r\npriority: u=4,i=?0\r\netag: \"69aa47f3-0\"\r\nexpires: Sat, 07 Mar 2026 19:08:01 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OglA%2FlSuqnPKMDtZKfVqRdYaoXn6kZXsEAPCprsHXOpD7RN3g2zHxTwUxXmMGd4%2BOP6QP%2BAV31mR9l4p2esDF%2F%2FkqwIRi6zLfv%2Fu1Rs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a58da93da3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/c033aa5013bfcc352136932c5706d2ed84b1e3ba.svg","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:01.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /c033aa5013bfcc352136932c5706d2ed84b1e3ba.svg HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/style.css\r\nCookie: _acc=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69aa47a3-dcc\"\r\nexpires: Sat, 07 Mar 2026 19:08:01 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvAnCH19m7Zogynr%2Bjf8IAVEgx7gCaOGD%2BHMCxu5nSrzpSxA8J6lq5E2zrvpEmOQ85GvC6FCraOWsly%2FeUgh%2Fw4c0mOkSGSkuctK1ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a58db93ea3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3532,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5edad663e0962b41d7a1da4f5579044e","sha1":"c033aa5013bfcc352136932c5706d2ed84b1e3ba","sha256":"b19fb4c933bbdf9ba6b1756e3c4bcf888d6f50168b0cd7aac5ff52e3574936c1","sha512":"815d83c58d4fb98a6e0e5e966ef2d43036fe24c31527ce848c8ad2b342a36e4fe6921e79b83fe383e2f5139b50aa342f53db31cdeee9fbd6e9424a5435abcde4","ssdeep":"","tlshash":"d47130f552d962e4a40bd765e83254207c6b34ff2b8acfdfc198bed09136189c999ca0","first_seen":"2025-05-18T19:50:38.43854Z","last_seen":"2026-03-30T08:26:55.817641Z","times_seen":86,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/e766e6cd5ecf80c9674f5af21e47d6a5d0354ba0.svg","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:01.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /e766e6cd5ecf80c9674f5af21e47d6a5d0354ba0.svg HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/style.css\r\nCookie: _acc=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69aa47a3-4a7\"\r\nexpires: Sat, 07 Mar 2026 19:08:01 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZZsdRc5CuT47f2MIc9pV%2B7qmuGL41h3zLr98%2FrF6zhC2o4ngzUvTfvzJLPupwFchISWQ88Fsd8lryRrIJ83uJD7NZ%2BK0CdmYByG6aE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a58db941a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ccf9ec000db6608e0af03736ad4a247","sha1":"e766e6cd5ecf80c9674f5af21e47d6a5d0354ba0","sha256":"27399af69ac85d385125de5a4f9f32a417c1b826f43483e232a271930d1f3682","sha512":"ded5b6e4898ba082f3541737ab3a753e0b6e8dc2a655cf6e93c67287b0e973e63c5e82553c8f654942f67186fb8e3db5ad1e82c1e0f6d0aec4b10dd031a042f0","ssdeep":"","tlshash":"4421c1d79fa476d89487cb74ea12ab25391c6cb72f95c74d669381b4c70410d1ce98c4","first_seen":"2024-12-30T21:56:21.868832Z","last_seen":"2026-03-30T08:26:55.809147Z","times_seen":87,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbup.click/favicon.ico","fqdn":"arbup.click","domain":"arbup.click","tld":"click"},"ip":{"addr":"172.67.201.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbup.click/arb","date":"2026-03-06T19:07:58.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbup.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 02:49:19 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"7E:A9:5D:AF:59:80:7F:D8:26:5B:8A:D4:D9:4F:00:9A:9A:62:E7:AD","sha256":"30:4F:EA:EE:02:96:75:CF:F8:CB:D5:D9:62:17:E7:01:6F:9F:13:D7:71:3F:62:0E:49:32:61:6C:37:8E:D6:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: arbup.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbup.click/arb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Mar 2026 19:07:58 GMT\r\ncontent-length: 9\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcodDqqbyhIikpeGj%2BPJpult1uKdSFxraOLoxmQFpFsXAJPkLIweZC67lp0vwlLU0FRSb%2BzeeP7VI6UqHYRJ7%2F%2Fx9wCuDUCIucrb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d83a57acf8a5610-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9e076f5885f5cc16a4b5aeb8de4adff5","sha1":"475c848673a3f79fa778f01c2bd5a721d4c41707","sha256":"e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31","sha512":"4d384838c78c74f56de20de3fe125b9fe4d40b7c9fb5d767b647f05aede6bf63431f4f08ac464e188e77b227becc3ab4ba86272f30b53d91b15003d814e06d2e","ssdeep":"","tlshash":"4a50000c3000030c0000003000c00030000c03000c0000300000c00c000000000000cc","first_seen":"2023-04-05T14:05:15Z","last_seen":"2026-06-07T23:32:02.864984Z","times_seen":8917,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T19:07:59.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nCookie: _acc=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:07:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 06 Mar 2026 03:19:00 GMT\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oz720987OQl08pYDDK2eZ%2B3rjyEyue4dZZvGyheBUei9LFdHJ45VGgXxFVdYqkDmuuQ%2BKHjUPwQCsTUvIdbflxB5XoJh6NPxB1KznLs%3D\"}]}\r\ncf-ray: 9d83a580b803a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10756,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (358)","md5":"45bc68c6910872fa9ea0d83132f2de67","sha1":"7d3aef7360701db62ab04c04976964ce43da7646","sha256":"c06dd3dd9e07d5b70ef529cb684f9916acc49744a57847429deb35261a8c0c71","sha512":"f9840095bef77fbed9096303e56476ad13778c0e2628b7d11ee150b27583ee997e8088ffa5cabba6b4bcf5a14efe8054957018230de3d5e206c07b003088eb3d","ssdeep":"192:ESCKfpcOKihU3ILYhngmIuSOTkUTqWkN5/1RAwcRZ7n:ESCKfKiaIL8YuS6kUTq1cP","tlshash":"7022433291f10037439392c1666767bbafa0d107da0bd61536ed47d94fc2e8acea368d","first_seen":"2026-03-06T19:08:26.806661Z","last_seen":"2026-03-06T19:10:32.828207Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/logo.svg","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:01.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nCookie: _acc=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 06 Mar 2026 03:19:00 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"69aa47a4-266c\"\r\nexpires: Sat, 07 Mar 2026 19:07:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 2\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGKCYZRaqRzFhWA6sbj%2BCz1ZbsYvso5ENPOm4GX8Cd0IuZNcALK9YDItCHIdp3PDX1tvgoVz4%2FbdxaFidw4upLpowFNCfheFO0Ov0lo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a58d5935a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9836,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"075a816d5a40d9d7b7a43c8100d78314","sha1":"02143fdf464b5ce914e840be0a45152982a791bd","sha256":"467e80233c085d89bbe9411653f157daf377ea316f08eb761e7ba1e38e265f28","sha512":"815b7751e643bf496c0f6575d2eacff367336c62db39802ddaeaabf98cf4c1624e30c37815b76458148b8f6fbee59cdeb11d55ca9ffbc5edbfae95dc8577fe3a","ssdeep":"192:ZzjRONG6IXVCyMCePZ/CoY0RH7d+2esFWDjwe9D1M4jC:ZHPVCylePZ/TRRH7dxXFWDjV9D1M4W","tlshash":"6112b6ddebf5d2e1e904b3e4abd3502d3b1264f7a796cab5c3862e65e91104cc489cc2","first_seen":"2024-12-23T21:37:25.887822Z","last_seen":"2026-05-23T13:11:24.689112Z","times_seen":94,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/welcome-image.png","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:01.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /welcome-image.png HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/style.css\r\nCookie: _acc=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 48815\r\nlast-modified: Fri, 06 Mar 2026 03:19:07 GMT\r\npriority: u=4,i=?0\r\netag: \"69aa47ab-beaf\"\r\nexpires: Sat, 07 Mar 2026 19:08:01 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2B%2Fzh0KbepjjqFPyed0micFvrWLMnsvxJdQSaYa9ky6%2FnG5q%2F9Tx6UDofnT%2BLs1qzLlVPE0k0nIoxlFvkRK3f%2F9yIOBQ5zSyrlaK9kU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a58db940a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2810 x 306, 8-bit colormap, non-interlaced","md5":"b2e8f1632361d11f933008496c12e390","sha1":"c6f3879e21f295c68cbe272f8e1a17c3752d5c2b","sha256":"b5d898a5b4b4ec64dabf3e8189d0d76f63d1d732e7f9db6ef2711985ee0fc0f5","sha512":"64acb085411d7c251c22ba16b341a5962ea9521ac5535c836848e5ed6ace6f66e068a94b4a3b75d31d277654e33af183afd8c32d65642382f59550edcbf4e895","ssdeep":"768:oQ3vCgEm1iKrZxEK0IKA9FisujqL4xAV4vKdC85qGfnzYZouWP11G796ZS6:oQfCU/0IKu/1L4K6vKCMMA+9oS6","tlshash":"4823f16d710c752bcb26eb70d1420184bd56d87e2ee22da92df27ff53e58c5c2912a24","first_seen":"2025-05-18T19:50:38.430988Z","last_seen":"2026-03-06T19:08:26.808464Z","times_seen":84,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:01.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/fonts.css\r\nCookie: _acc=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 46704\r\nlast-modified: Fri, 06 Mar 2026 03:19:01 GMT\r\npriority: u=4,i=?0\r\netag: \"69aa47a5-b670\"\r\nexpires: Sat, 07 Mar 2026 19:08:01 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mf1vn8E8iKEae2qvhADCcH4jgzNy8xHSa4L1%2FPTrc0T5KBG5R293VsyeazD21wsMoiDn3Fdib3ZT8%2BX1uXPySk2EzAdmlxKbXNYBDkg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a58dc942a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-06-07T05:04:35.345851Z","times_seen":20037,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/protect.js?v=6","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbcore.click/","date":"2026-03-06T19:07:59.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /protect.js?v=6 HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nCookie: _acc=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:07:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69aa47a3-17b8\"\r\nexpires: Sat, 07 Mar 2026 19:07:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHTGAEvKBwMpE1NFoWHR72fQFn1uXBM7LNQHaBxNdSFmZr6eJiHusge0qP7QgcTkyVypU3shQEK2%2BKZ3ebewfFeX1kFdzw7ij08lYxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a581280ca3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6072,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"37078474be98b7db76b5741fa1c1c764","sha1":"43c82d94f31f94d33c568ebb2f303168acba1db6","sha256":"8bf810837f8e8eb778abaa40e4ec6ae312b51d128d526667d8d76b9dfb58994d","sha512":"356e209edca144dc3efa1e2830138777b951a10740a530a1e8b46bc2ee12fc8cf0cf3f3cac511b9c5ee1e8c164f4702bf36ee4f09746df48c4cdc9ba28988051","ssdeep":"96:fwmr/gun3Ikb57Qz3XMFcuhlMb8U60qJWEa8YrxuBUH5dkeBSZSZSTCuhYb55n0F:J//n4ipq3cyuhlMb8J0q/a8YQUH5yeQh","tlshash":"11c1746a96c3047d3b63e06a9b9b73183c3a147b310b8d26744c3b691fd171246b6afc","first_seen":"2026-03-06T19:08:26.810139Z","last_seen":"2026-03-06T19:24:31.615893Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/55666b51ea.php","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbcore.click/","date":"2026-03-06T19:07:59.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /55666b51ea.php HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nCookie: _acc=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:07:59 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7q7FqKvq4%2Fo2yADXDwtvQ4gBLazsMHuuaWyMKJ8F6lFL%2B0Nhb0LF1Gjx1VJ4j%2BC0TA8PCY7UEBDc%2FWPIvfzUd0dykJd7eTGbTV0GAhI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a581280da3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2449826,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"de739a4efde83818c0f5bbef60cb2e06","sha1":"f51d93193824aba78f414a5e75ade726ca7ba9da","sha256":"e743f5b6c66a402979048ef23d251591e0c02b38998118301982522d31f88568","sha512":"090b8647d9bccd2bac47298e80f6e119eea497a2d4c106f824f7663b41e52471eae4dfbdbbc3f72c5a3454adbdb31f463569a8709150235eaef8177db4b5de0c","ssdeep":"24576:NBfusupcIm0x8cQWeWR8wPo9XG1cdunm1tcBTRJ4SgNoek2K1EOwuPQE61uW:QK0kwNRJ4jf7OhL6D","tlshash":"9ea574598663f3a49ec876e43c1152e4b9b843dfc6cda36d4b6bcce02dc583c259a4e1","first_seen":"2026-03-06T19:08:26.811136Z","last_seen":"2026-03-06T19:08:26.811136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/fonts.css","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbcore.click/","date":"2026-03-06T19:07:59.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /fonts.css HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nCookie: _acc=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:07:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69aa47a3-a94\"\r\nexpires: Sat, 07 Mar 2026 19:07:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3ThcyEg%2BDDsuHwdi%2FQpLirLpQtc%2FgUVgxnus35hspq5EVO7vUWDOKSuAxy0N%2FrW%2FQE4DOa6luqTuHGOa1Ph7UTCOf5qPtkCATjXlUA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a581280ea3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7a3379c63a773a6f4d6ac4a7a8297589","sha1":"37619b299bc15c0411017dfcaa50bd5adb913b43","sha256":"48a8db56a615295d8ed7fbd2b8c39cf3c3a89c96aacb824711ded786a322581f","sha512":"73f383eb26c548a0505be067e2b3ec7869e9b459e1c4c79d3a561bbdb318022c01094f54a0625b5501242044332f49e56ac5faf5f634dc2a2aee8fbb7680e0e0","ssdeep":"","tlshash":"7b517b90041b2104e2730c8e63de7f21d99d60539280a239bffd3a996ffbdb91265b4d","first_seen":"2025-05-18T19:50:38.418241Z","last_seen":"2026-03-06T19:10:32.838812Z","times_seen":83,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/assets/index-vMRztd5t.js%3E%3C/script%3E%3C/head%3E%20%20%20%20%3Cbody%3E%20%20%20%20%3Cmeta%20charset=","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arbcore.click/","date":"2026-03-06T19:07:59.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /assets/index-vMRztd5t.js%3E%3C/script%3E%3C/head%3E%20%20%20%20%3Cbody%3E%20%20%20%20%3Cmeta%20charset= HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nCookie: _acc=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:07:59 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZxWPk3FqQKzYq6XXKjUY0J8n1Lz3QczFzoJJonHZS6a4tbSJZQrpa3YW38NHUi1nI6mTo7%2F3g4AhetgoAYT8e50Iwiq0E%2FBpNi3L6A%3D\"}]}\r\ncf-ray: 9d83a5812810a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/BrittiSans-Medium.woff2","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:01.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /BrittiSans-Medium.woff2 HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/fonts.css\r\nCookie: _acc=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 8712\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\npriority: u=4,i=?0\r\netag: \"69aa47a3-2208\"\r\nexpires: Sat, 07 Mar 2026 19:08:01 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V33BuKJ6YBR%2F6JXx7RInTTbhAYCdjcvcoXpF4QfPyYHgID6spVJErXPyp1x7Goxwlrh97hVvpz02Um28YUriLmiGbYYrTBKHrlQhuuY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a58dd946a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8712, version 1.0","md5":"05032d99d77e7383adc269f0185b3e82","sha1":"5b3abfa226b21b09cef2d832c0d0fe61d786253d","sha256":"409204a313833b0e08f86d3c4d4d709d1977f4a427f4de4aa5333c62679d5583","sha512":"c3f9c83add782c2621ec25bba05816ec095442f2f9c54abc5bd6b9e7f8fd6e80e1ed0ceee0cc0244c6daa6b67e18300d12cb9eef2e6b5ab30c9e36ba9e1f6a9d","ssdeep":"192:ZBLS4CHEVZ3P17at0LmuxdxDY1rbA2y4wGc3GKRid01h:ZA4CkTW0LmcdxDY1vhLwGc3Z1h","tlshash":"f902ae27e00daa1cf01d2ba94f13afd685499af72ff2cba345128012f5d3a34031a26d","first_seen":"2024-12-23T21:37:25.914294Z","last_seen":"2026-05-23T13:11:24.729867Z","times_seen":98,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/favicon.svg","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:01.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nCookie: _acc=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 06 Mar 2026 03:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"69aa47a3-91b\"\r\nexpires: Sat, 07 Mar 2026 19:08:01 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABTwi3JAhffDDsZkmvpovY3z%2BpEMjk9IDv7K%2FyVDvMmUc%2FkbnZxkP6frSAn4yPR00GnYrygktgM%2Bpxyv%2FnFS103MU%2BG7VzlaXB8nHXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a58ed952a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6402120fd8435947c8b18327701f1612","sha1":"d7fdc769f65013daf22cbf171aa6576a38e419e2","sha256":"ee23ddfb480b71782a9d303d76a3aecfab96f942a88266d364d97a5344aae9ff","sha512":"a5a7b36e842ca7b0567121c064102eb5b756e9946692296a8d4c899ba9fd5313c1ae08621f96cad2eb925c401c4a84573fec70e94584c227483ac8df483da9f5","ssdeep":"","tlshash":"22413ec3e384a8d4d4a4a7f84a1e60282b1778e79d10c150aad62e33f8421bd4d9aed3","first_seen":"2024-12-23T21:37:25.920331Z","last_seen":"2026-05-23T13:11:24.772708Z","times_seen":91,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/#bf0149139f2d46","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T19:07:58.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbup.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:07:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 03:19:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kI%2Bw40b3nLMrvVHHXDcBJfUqiPxJB6E8lj9ZEdQH1shXGsi9%2BHw0VTdtgtYiRCzpdyWTr6Z%2FkY985i3I%2BsMfUzcFakgBV4NgVj76nc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d83a57d9d3a9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10756,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (358)","md5":"45bc68c6910872fa9ea0d83132f2de67","sha1":"7d3aef7360701db62ab04c04976964ce43da7646","sha256":"c06dd3dd9e07d5b70ef529cb684f9916acc49744a57847429deb35261a8c0c71","sha512":"f9840095bef77fbed9096303e56476ad13778c0e2628b7d11ee150b27583ee997e8088ffa5cabba6b4bcf5a14efe8054957018230de3d5e206c07b003088eb3d","ssdeep":"192:ESCKfpcOKihU3ILYhngmIuSOTkUTqWkN5/1RAwcRZ7n:ESCKfKiaIL8YuS6kUTq1cP","tlshash":"7022433291f10037439392c1666767bbafa0d107da0bd61536ed47d94fc2e8acea368d","first_seen":"2026-03-06T19:08:26.806661Z","last_seen":"2026-03-06T19:10:32.828207Z","times_seen":3,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":91,"dns":58,"connect":10,"send":0,"wait":84,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/style.css","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arbcore.click/","date":"2026-03-06T19:07:59.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbcore.click/\r\nCookie: _acc=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:07:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 03:19:00 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69aa47a4-786f\"\r\nexpires: Sat, 07 Mar 2026 19:07:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yr6%2Blr2VF%2BYaUIsRG0SSv0YZfBuFc7WPVl6YZ3WGrJvk66LLAMKpJTng8V%2BqSocDGlQmvjQ0UBK0W4uIeTW2rJvCRlEsF6um8yiPoz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a581280fa3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30831,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (462)","md5":"2fcef81a89ba36d78edff05dc60f4f2c","sha1":"69a0ed8b9228910ae234aca94e3f7452f1355aee","sha256":"820c61be3d0608af4f516572e29b0fff836f062f8a179c112e2fc72be6d151e9","sha512":"c4d0d976fdb2158403486300f92b1ed7ea1112d469f249f76a59521db7932afb2a48099ec2fc35f29d1a5cfe0e3563320694fadadac0af69256e2a2831fed233","ssdeep":"384:nP8zsrwi3N+TtDA6Swu4KtwN/d157cpks:P8zWD7eN2pks","tlshash":"20d2abab5253160478079c481bea175163bcc013940ef6f83edf66988f8bac9d9d27de","first_seen":"2025-05-18T19:50:38.436276Z","last_seen":"2026-03-06T19:10:32.840061Z","times_seen":86,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbcore.click/55666b51ea.php?e=/api/fp","fqdn":"arbcore.click","domain":"arbcore.click","tld":"click"},"ip":{"addr":"172.67.135.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arbcore.click/","date":"2026-03-06T19:08:02.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbcore.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:24:52 GMT","end":"Thu, 04 Jun 2026 02:24:51 GMT"},"fingerprint":{"sha1":"35:E0:E4:A5:38:28:CF:35:C8:EE:D9:68:FF:12:07:C9:27:56:2E:E7","sha256":"6E:9E:02:83:70:1E:F1:8B:35:D8:EA:3D:CB:AC:F3:97:29:00:1F:76:EA:05:61:0A:D7:F6:D9:65:71:03:0F:4B"}}},"request":{"raw":"POST /55666b51ea.php?e=/api/fp HTTP/1.1\r\nHost: arbcore.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://arbcore.click/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 35E0-8509-B5BC-9B51\r\nContent-Length: 1292\r\nOrigin: https://arbcore.click\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _acc=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1292,"data":"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"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 19:08:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FidBxitU3jvHJg5k75FYtzbYlgts18jKT7BDoz7RG%2B4Tl3SAkKY45sHHcuG5ed3FX3XML%2BRmT64pzlWgDPuRNja3bZiP%2BzU30JZoOUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d83a590e98ca3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ed6bd7652561462c9de5ca4f1d02a79f","sha1":"e1033426c22b195a959299104d8e75c56261963f","sha256":"8f23048769aa0247a387a793d00653163b9330ce1b29f205f00d41561065d34c","sha512":"e462f24b314b2a87155ba540395fdf32df5397be7c8f00c73aceb40c1e604383c2eed7e2c9f9eadf3917c01dd1e5a3331d100d83b4f27371ac42f312b507bbeb","ssdeep":"","tlshash":"e4d0eb810284c02aaa400d3fa1f1bc3baba8a1d2806be20c31e418ce46d0a44b00106f","first_seen":"2026-03-06T19:08:26.816097Z","last_seen":"2026-03-06T19:08:26.816097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"arbcore.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbup.click/arb","fqdn":"arbup.click","domain":"arbup.click","tld":"click"},"ip":{"addr":"172.67.201.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T19:07:58.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbup.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 02:49:19 GMT","end":"Thu, 04 Jun 2026 03:49:15 GMT"},"fingerprint":{"sha1":"7E:A9:5D:AF:59:80:7F:D8:26:5B:8A:D4:D9:4F:00:9A:9A:62:E7:AD","sha256":"30:4F:EA:EE:02:96:75:CF:F8:CB:D5:D9:62:17:E7:01:6F:9F:13:D7:71:3F:62:0E:49:32:61:6C:37:8E:D6:99"}}},"request":{"raw":"GET /arb HTTP/1.1\r\nHost: arbup.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:07:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtEGqCiO3S%2FZfy%2B9FfHiYvhqXvFSlKQy6jtsc7NQsUZzkE8Nli%2Fdj5Ja3G%2BiMATiE4wVnl9keIwJTsJRO1oI%2FOkzYY06ZqEGv4Fk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d83a5795fbcf3c7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"9de81ab7a662805cb2dbba3f22072688","sha1":"8a49ff2c3ef0f793167736623a76338ad67b479d","sha256":"dbb1d046f1ecf16906f3454c02260abfa9babc90122c8fc0f6675f783043e5fc","sha512":"f43640d3ae34bc2cc8d84db2a819895185f256fdea151205ed737ae6cd87557bed2ae89daf7cafdb20f3b3f33e917d7e091187e482a16f9b068a06db59ba9844","ssdeep":"","tlshash":"42210197d122904db633c16108ee724c50b4a40bd2519d51f68c225e09eeed6e5f3394","first_seen":"2026-03-06T19:08:26.816873Z","last_seen":"2026-03-06T19:08:26.816873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":85,"dns":57,"connect":8,"send":0,"wait":85,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}