{"report_id":"7f0be686-3c0a-4631-9896-62b09988e072","version":6,"status":"done","tags":[],"date":"2026-01-26T11:21:26Z","url":{"schema":"https","addr":"hyperfoundatoin.xyz/","fqdn":"hyperfoundatoin.xyz","domain":"hyperfoundatoin.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hyper-01o.pages.dev/app","fqdn":"hyper-01o.pages.dev","domain":"hyper-01o.pages.dev","tld":"pages.dev"},"title":"Hyperliquid Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T10:49:05.700695Z","times_seen":17816053,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hyperfoundatoin.xyz/","fqdn":"hyperfoundatoin.xyz","domain":"hyperfoundatoin.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T11:21:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-26T11:21:07Z","timestamp":1769426467,"ip_dst":{"addr":"172.66.47.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56782,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-01-26T11:21:07.175146+0000\",\"flow_id\":63730035682629,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.50\",\"src_port\":56782,\"dest_ip\":\"172.66.47.64\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"hyper-01o.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":921,\"bytes_toclient\":3542,\"start\":\"2026-01-26T11:21:07.159045+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hyperfoundatoin.xyz","ip":{"addr":"104.21.57.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2026-01-26T11:21:27.187934Z","last_seen":"2026-01-26T11:21:27.187934Z","alert_count":0,"request_count":2,"received_data":18919,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hyper-01o.pages.dev","ip":{"addr":"172.66.47.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-01-26T10:55:46.892189Z","last_seen":"2026-01-26T10:55:46.892189Z","alert_count":0,"request_count":3,"received_data":281502,"sent_data":1427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.sharedocumentview.info","ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-14T16:59:17.428765Z","last_seen":"2025-10-14T16:59:17.428765Z","alert_count":8,"request_count":2,"received_data":6531883,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.coins-rating.com","ip":{"addr":"44.197.56.130","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-26T10:55:46.889258Z","last_seen":"2026-01-26T10:55:46.889258Z","alert_count":0,"request_count":1,"received_data":4085,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hyperfoundatoin.xyz/","fqdn":"hyperfoundatoin.xyz","domain":"hyperfoundatoin.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2806d4463933ad6212ea5998384e2854","sha1":"7e5a716072b3134e93b92e2f9feae8189f8b9f56","sha256":"da2dc8de36efe39f00f0563e43d0cbb944cb1def2b637bdd59c89b0323339c2d","sha512":"1bd39333c5b95fbe6c4db703516f396242faf6d41e1474f5207e6546e45bc24659e70f57bf72e2287d1ab2df34ade8bc482827f361d8f1d98c3972d172a9114e","ssdeep":"","tlshash":"1b41aa063ef229300a5b92be5bde2444343090132549cc18fa5dc78c8f67f54eaa6fe9","size":2043,"data":"","first_seen":"2026-01-26T10:55:51.401253Z","last_seen":"2026-01-26T11:21:28.891442Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperfoundatoin.xyz/","fqdn":"hyperfoundatoin.xyz","domain":"hyperfoundatoin.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"212fa0b6901ac32e935e018384dc79fd","sha1":"cfd6318819a934212c3fdfd9165024e9ddb9461d","sha256":"24ab6964935cfcf8b69c0d7877da3274ceb3e1dc9f77067edfdf7c3ce9f48c43","sha512":"fe5c732d47969b6e24eede60e33ac8d0ff40a075b6a497977408ab42cf4eb6049506929b338860a2854bc7f3b6ee0de3c18c0fa88c12d88e4bd390f0e7312cf3","ssdeep":"","tlshash":"b990029e64101a64a251c03a35f51a1815231000f1295256671ad018151da0057256e6","size":52,"data":"","first_seen":"2026-01-26T10:55:51.402508Z","last_seen":"2026-01-26T11:21:28.892143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyper-01o.pages.dev/53fb52ab-943c-4a72-b8c0-9cb1bcd8e9a5","fqdn":"hyper-01o.pages.dev","domain":"hyper-01o.pages.dev","tld":"pages.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-10T05:18:11.87134Z","times_seen":5108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyper-01o.pages.dev/f74fce85-e3e2-4584-8f05-3054c6c2ec83","fqdn":"hyper-01o.pages.dev","domain":"hyper-01o.pages.dev","tld":"pages.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df73988252e4e56e97ba60a379b1adb","sha1":"71fcb419a05752a6816ec8cb8d6ff66f2b286575","sha256":"795b58fa3e79ac5f0fe3f40fd1a8780febc568757a02fb88cece17317ec0a0d3","sha512":"76bbb9908159d4a89749d84c7cfc019cebaecb2a738e68d09f3e7194cd362e8991548472274377a2b829abdeccdd6a077443dca3c4c9f205ccf78d4a3568702e","ssdeep":"768:FVX6Xl2NCM1idz41CAr7cC2Iq5a87XZUXfl2rsi14UcCs+Wl4:FVLCl","tlshash":"6ca333131cbe346b048f4b63f5295e47af5ffa43da16624cb2bc26852fb7d56c982204","size":107243,"data":"","first_seen":"2025-12-16T18:55:46.047375Z","last_seen":"2026-07-18T23:39:45.24889Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sharedocumentview.info/f63t41.php","fqdn":"app.sharedocumentview.info","domain":"sharedocumentview.info","tld":"info"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa5c29384c7f7c38475081525e77cbb7","sha1":"c88d2d7f3310dd1a83581031667b47f2534dc92e","sha256":"adba6c2380be51f8ccdc9ad67327032856c602b24643838c1fa171a084c829a9","sha512":"6b0fe1b87f7af916ce18b9b7c8b9f03c84265c329372864588aef5796ccbcbadb1eee6a4c759991bfc403954cbe446e1ec5142cf1f17d81bb1a8a21e52d9b905","ssdeep":"768:572Zc1cIcScdcTcN00DVc0byDXjgUm4euznxw88CgIT5r6RNROKhfcHzLlaoEQvE:0yDcUmQni8gxb1TIFFYH9YQd0lKfxr","tlshash":"21c361d96a0bd0d88e5511ded4b3e805e4284e23cdadf1a7e92dedc1742df62808727b","size":119955,"data":"","first_seen":"2026-01-26T10:55:51.399004Z","last_seen":"2026-01-26T11:21:28.889523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperfoundatoin.xyz/","fqdn":"hyperfoundatoin.xyz","domain":"hyperfoundatoin.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62b929017a5e3d77dbd235ccc4fdbbe6","sha1":"f010bc9de6e6efe36110a53b1ff704a8143848a1","sha256":"a30489873e13bc390bdaf55fbb96d48ea8272b6d655d5a531b7ca997844e3187","sha512":"04f3d3a9035d50ee28c6a6ea779131e9ba704c79953c737aafe9353beac74d87f2a9ec608195507e1569c112863b8d58ca6a8c5f5f1c56745e83b59d49ab342d","ssdeep":"","tlshash":"96a02200c23c0c30322a3232a02ff300e0f02020200ce33c0c3aea0c2c008300338fc8","size":77,"data":"","first_seen":"2025-09-11T15:28:29.543423Z","last_seen":"2026-01-26T11:21:28.894107Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hyperfoundatoin.xyz/favicon.ico","fqdn":"hyperfoundatoin.xyz","domain":"hyperfoundatoin.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperfoundatoin.xyz/","date":"2026-01-26T11:21:03.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperfoundatoin.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 09:07:05 GMT","end":"Fri, 06 Mar 2026 10:06:58 GMT"},"fingerprint":{"sha1":"69:70:20:28:FF:D2:D1:FA:06:48:46:4A:30:D6:D5:B5:B3:FF:18:15","sha256":"22:01:AA:00:8D:9A:9D:2E:82:75:32:35:85:36:ED:63:46:9D:F5:50:73:91:70:57:55:DE:E4:1E:D7:2A:F4:2E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hyperfoundatoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperfoundatoin.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 26 Jan 2026 11:21:03 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2J5ycTQROEENbemrSMfVwu2yOwhzDsFezQQRx0T36xVi01ulREBPa2xQ%2FrxOYDD7IOyfFBnr%2FioWEc9vwG5KMy791ctdvmrDJqyroKDXW1ng%2Foc%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\ncf-ray: 9c3f9fe3ee75120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8713,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a65335a0777e6635143bc2cfb5444847","sha1":"f80df07b45ac03d878635953476e6dfcce2328ed","sha256":"9ad7574dea876a88669898733d9da52b244c43b307f041020fcf55de65055d53","sha512":"c50bcedfe901e66b43e737021a36a401935b37dc244e87804c3a273d11f20f5d7169d88d749a94da9e6dbc7883a2651ce08c2adc066b016ff02a74ee6b03a0e9","ssdeep":"96:TbOyq/hRbzTVNBUA86kGTjVZ5nJDxGefqa7SZW58:Tbrq/hFvVnU4lpXnJaa7Sk8","tlshash":"960243162ad005166137d3759bf2526cf97a801783438a5c7bdca38b4fb2ac88e96fd4","first_seen":"2026-01-26T10:55:51.393174Z","last_seen":"2026-01-26T11:21:28.886576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyper-01o.pages.dev/favicon-32x32.png","fqdn":"hyper-01o.pages.dev","domain":"hyper-01o.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyper-01o.pages.dev/app","date":"2026-01-26T11:21:07.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-01o.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 08:26:20 GMT","end":"Fri, 06 Mar 2026 09:24:01 GMT"},"fingerprint":{"sha1":"37:75:FA:64:0F:E3:31:82:79:CA:06:EF:50:15:E0:49:3A:EA:06:9D","sha256":"C6:7C:F6:29:29:62:9B:01:86:37:37:E5:3D:F2:97:E7:C7:65:7F:C8:4C:26:B2:1F:4E:E2:74:F1:08:60:6F:5C"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: hyper-01o.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyper-01o.pages.dev/app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 11:21:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 898\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e2cb230c5437a9a4ac154cb9e70b83b4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzHkcfsljd6U4MlozHrkxSMo7XjYuWwRIxnllD8NkVmysMR9ZF8%2F7L%2F5MknKMWAqZIH4xXZNXm0YM7SclYXdS%2FCGQciLjYIzO7Pmpq%2F7E7YE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c3fa0000c1c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":898,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"437a8c13e75506d85cdbcf81c4772036","sha1":"d8aa91874c0b9a1b5e3be0dfb43751f0d5d9a7d4","sha256":"3cf31bdb20f8ad764b3c0368fd20106991b0b8ae3ba64f5dfebb0c468fa9b08f","sha512":"a1fc4738016147c578e4eea933d8c0d1680ea4686bec456d62514485687155ab810b0685723addd058dac8e26255011a82bf4048cedfa1106b0c82434e852ebc","ssdeep":"","tlshash":"3311b798e918b495f661c23d8f5d801cf9c4faa41066922d3f7da42107ea075890d40e","first_seen":"2025-06-30T18:42:04.73498Z","last_seen":"2026-07-12T22:09:12.912325Z","times_seen":23,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sharedocumentview.info/f63t41.php?m=2949044","fqdn":"app.sharedocumentview.info","domain":"sharedocumentview.info","tld":"info"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyper-01o.pages.dev/app","date":"2026-01-26T11:21:07.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.app.sharedocumentview.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 20:26:40 GMT","end":"Tue, 14 Apr 2026 20:26:39 GMT"},"fingerprint":{"sha1":"6B:61:FD:08:5D:84:6E:E4:4F:58:C8:BF:90:3E:2D:A9:8F:B5:EB:0D","sha256":"60:8B:E5:8C:F9:73:FB:2D:CF:35:AF:64:03:A6:6F:18:A7:66:17:39:95:5B:5E:3A:3C:BF:B5:CB:58:2B:15:B8"}}},"request":{"raw":"GET /f63t41.php?m=2949044 HTTP/1.1\r\nHost: app.sharedocumentview.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyper-01o.pages.dev/\r\nOrigin: https://hyper-01o.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 26 Jan 2026 11:21:09 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: MISS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6410896,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5a2a005ac5afb786104c1d718544b04","sha1":"49a1959c38e71a044af59a4877b53db960728729","sha256":"9fe9e132d198b4f5dc284c13bd1581530de6c909b18e922bbccecf357fb33d85","sha512":"9a1ac22c0e6eef17295a3bda3fd09b3e213d5b8f3c7fabdba2dc77675305ae60773c6c11432df15e5282d4ed8e5eb93f9ca0b3e0ab64f3c5ea3667cf9123ccf6","ssdeep":"24576:eoX06IeDBBpTucHm4IfIf/5LNwjDr7lxPz:eoX0ve1BIcHmRIfxLSV9","tlshash":"6e2513e2f026a0e33b55517969e05bfc3d6ea48d12e66775a284ed98306f07cc3dc8d2","first_seen":"2026-01-26T10:55:51.39532Z","last_seen":"2026-01-26T11:21:28.887664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2081,"timings":{"blocked":183,"dns":0,"connect":58,"send":0,"wait":1714,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperfoundatoin.xyz/","fqdn":"hyperfoundatoin.xyz","domain":"hyperfoundatoin.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T11:21:02.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperfoundatoin.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 09:07:05 GMT","end":"Fri, 06 Mar 2026 10:06:58 GMT"},"fingerprint":{"sha1":"69:70:20:28:FF:D2:D1:FA:06:48:46:4A:30:D6:D5:B5:B3:FF:18:15","sha256":"22:01:AA:00:8D:9A:9D:2E:82:75:32:35:85:36:ED:63:46:9D:F5:50:73:91:70:57:55:DE:E4:1E:D7:2A:F4:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hyperfoundatoin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 11:21:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BWTLrNAaJ8YiUoXvvze4XyXdw65iiyCeReOyeBwBdIhnCSThF4EccuBweoMiCw6w5yGGJ2oUgpaVmZkJ21%2B9paRjARbi0wFq5QHkK7Mo2Mh\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9c3f9fe1bf04b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]}],"data":{"size":8713,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a65335a0777e6635143bc2cfb5444847","sha1":"f80df07b45ac03d878635953476e6dfcce2328ed","sha256":"9ad7574dea876a88669898733d9da52b244c43b307f041020fcf55de65055d53","sha512":"c50bcedfe901e66b43e737021a36a401935b37dc244e87804c3a273d11f20f5d7169d88d749a94da9e6dbc7883a2651ce08c2adc066b016ff02a74ee6b03a0e9","ssdeep":"96:TbOyq/hRbzTVNBUA86kGTjVZ5nJDxGefqa7SZW58:Tbrq/hFvVnU4lpXnJaa7Sk8","tlshash":"960243162ad005166137d3759bf2526cf97a801783438a5c7bdca38b4fb2ac88e96fd4","first_seen":"2026-01-26T10:55:51.393174Z","last_seen":"2026-01-26T11:21:28.886576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":49,"dns":34,"connect":1,"send":0,"wait":50,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coins-rating.com/img/projects/12_06_23/648674b19d2c7.webp","fqdn":"api.coins-rating.com","domain":"coins-rating.com","tld":"com"},"ip":{"addr":"44.197.56.130","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperfoundatoin.xyz/","date":"2026-01-26T11:21:03.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coins-rating.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 15:41:22 GMT","end":"Tue, 31 Mar 2026 15:41:21 GMT"},"fingerprint":{"sha1":"7B:2E:A6:5E:66:93:4C:10:FE:AA:3E:BB:BF:B9:CB:F3:7A:BF:40:D3","sha256":"F5:C3:31:1F:87:F5:97:B7:59:35:5D:88:90:9F:8F:31:4E:4D:DC:4D:4B:F6:21:76:9E:03:0D:6A:D0:5E:59:45"}}},"request":{"raw":"GET /img/projects/12_06_23/648674b19d2c7.webp HTTP/1.1\r\nHost: api.coins-rating.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperfoundatoin.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 26 Jan 2026 11:21:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3820\r\nLast-Modified: Mon, 12 Jun 2023 01:28:17 GMT\r\nConnection: keep-alive\r\nETag: \"648674b1-eec\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6efbaf8c7d49c26882dcfb197c7a2673","sha1":"d1085317d452cad0bd5d6b2348a0cbcae2da4969","sha256":"94ab3fbd9bd3924331bd6a38daff1cd7ffa391a5b02ac0c01cbcd1db05ed1f6b","sha512":"e04d1b84eb572dc1a5e2935628681da0e961356e3e313de00d16366f3e4cb2afaade80e7c7bae1198f24449b399e8967cdfef0c3a7a8cee0730e72db79e2d709","ssdeep":"","tlshash":"6b716d11058b3b169a264a0f858a2377ac186871633d6908f9c2d7e9c2e96d832491f0","first_seen":"2026-01-26T10:55:51.397Z","last_seen":"2026-06-26T13:16:04.164955Z","times_seen":3,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":224,"dns":34,"connect":94,"send":0,"wait":94,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyper-01o.pages.dev/app","fqdn":"hyper-01o.pages.dev","domain":"hyper-01o.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T11:21:07.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-01o.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 08:26:20 GMT","end":"Fri, 06 Mar 2026 09:24:01 GMT"},"fingerprint":{"sha1":"37:75:FA:64:0F:E3:31:82:79:CA:06:EF:50:15:E0:49:3A:EA:06:9D","sha256":"C6:7C:F6:29:29:62:9B:01:86:37:37:E5:3D:F2:97:E7:C7:65:7F:C8:4C:26:B2:1F:4E:E2:74:F1:08:60:6F:5C"}}},"request":{"raw":"GET /app HTTP/1.1\r\nHost: hyper-01o.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperfoundatoin.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 11:21:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLGjcNH312TEwvlyfLvCSLQTwdSXgFhnWEeZW4tsKrS5B6jxRkhyKrqnxL8MMNfSfJT6AgfVO3hI5bG7dORqVjYYf6yb69eK5KEhlckQ8NxN\"}]}\r\netag: W/\"4a79f28698599d49df5bd768eec5b64d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c3f9ffbf90956c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2298,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0d51b12bce5e5abaef50af79099a1c8c","sha1":"23392b16a50f5da19e4d049142339f1df3fce95e","sha256":"9b9849e81ceadafba25be0295d1262a4415c5cdcff210f31b8d2d1cb6204ea30","sha512":"5c4eeff2d259bc96c48486d11b7a473d6bbecbc3b5597b064de5537f57c8d5ea5c32ad19cd1babb46721b776940caa77fd57dcb9fa4871f15f21626939527aec","ssdeep":"","tlshash":"954111258a861846b03b8354bf73c70ed35a941bc30249287bec73639fb5558c1a7bcc","first_seen":"2026-01-26T10:55:51.397975Z","last_seen":"2026-01-26T11:21:28.888969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":59,"dns":29,"connect":3,"send":0,"wait":29,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sharedocumentview.info/f63t41.php","fqdn":"app.sharedocumentview.info","domain":"sharedocumentview.info","tld":"info"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyper-01o.pages.dev/app","date":"2026-01-26T11:21:07.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.app.sharedocumentview.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 20:26:40 GMT","end":"Tue, 14 Apr 2026 20:26:39 GMT"},"fingerprint":{"sha1":"6B:61:FD:08:5D:84:6E:E4:4F:58:C8:BF:90:3E:2D:A9:8F:B5:EB:0D","sha256":"60:8B:E5:8C:F9:73:FB:2D:CF:35:AF:64:03:A6:6F:18:A7:66:17:39:95:5B:5E:3A:3C:BF:B5:CB:58:2B:15:B8"}}},"request":{"raw":"GET /f63t41.php HTTP/1.1\r\nHost: app.sharedocumentview.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyper-01o.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 26 Jan 2026 11:21:07 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":119955,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aa5c29384c7f7c38475081525e77cbb7","sha1":"c88d2d7f3310dd1a83581031667b47f2534dc92e","sha256":"adba6c2380be51f8ccdc9ad67327032856c602b24643838c1fa171a084c829a9","sha512":"6b0fe1b87f7af916ce18b9b7c8b9f03c84265c329372864588aef5796ccbcbadb1eee6a4c759991bfc403954cbe446e1ec5142cf1f17d81bb1a8a21e52d9b905","ssdeep":"768:572Zc1cIcScdcTcN00DVc0byDXjgUm4euznxw88CgIT5r6RNROKhfcHzLlaoEQvE:0yDcUmQni8gxb1TIFFYH9YQd0lKfxr","tlshash":"21c361d96a0bd0d88e5511ded4b3e805e4284e23cdadf1a7e92dedc1742df62808727b","first_seen":"2026-01-26T10:55:51.399004Z","last_seen":"2026-01-26T11:21:28.889523Z","times_seen":2,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":198,"dns":1,"connect":59,"send":0,"wait":59,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"app.sharedocumentview.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-01o.pages.dev/bg.png","fqdn":"hyper-01o.pages.dev","domain":"hyper-01o.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyper-01o.pages.dev/app","date":"2026-01-26T11:21:07.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-01o.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 08:26:20 GMT","end":"Fri, 06 Mar 2026 09:24:01 GMT"},"fingerprint":{"sha1":"37:75:FA:64:0F:E3:31:82:79:CA:06:EF:50:15:E0:49:3A:EA:06:9D","sha256":"C6:7C:F6:29:29:62:9B:01:86:37:37:E5:3D:F2:97:E7:C7:65:7F:C8:4C:26:B2:1F:4E:E2:74:F1:08:60:6F:5C"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: hyper-01o.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyper-01o.pages.dev/app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 11:21:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 276053\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"770ab81bfd1e5e359879b2c87a2f5840\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lAEpG%2Fvs995fxnmV9sVn7T02VS%2Fj6foG2cOgGtKde%2BKAib1EAizWJwdLjBBiP84fMabrbDfEF06ZE4vYDnLPUx5iTnbG4LjVIx8w%2BoIBMqNa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c3fa0001c2856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276053,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 880 x 550, 8-bit/color RGB, non-interlaced","md5":"38d5fee9e360beb8ac13a9c35088ccc1","sha1":"87e72e85acd965260898dbfd8edea6c582cf7aec","sha256":"3355fa6927e93b05c9e606a63cbdae11eb1039be925a94e5730c296ff73118ab","sha512":"1ccd8bdf7948030db3cad9f48f87f038886f32d933af27750b6c238275b798f3da7faf2ec66a908e5536f75ce7912c864afb6e5f581eb626e6546cde90a195fe","ssdeep":"6144:69dsqwW3uUNswJp8vS5qC7vVqQeMZSTTomUqAAf5yz3uowvW:oinW7SgpdnzHebT6+f5ZW","tlshash":"4e4423cec2738ca17e0b70f19ab7357113904254a5150679698f3c388bae3b95e68fd3","first_seen":"2025-10-26T09:09:55.612298Z","last_seen":"2026-01-26T11:21:28.890898Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}