{"report_id":"80d1efb5-b835-449d-a60a-3879d6b52073","version":6,"status":"done","tags":[],"date":"2024-06-28T07:20:26Z","url":{"schema":"http","addr":"femxpa3.cc","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"http","addr":"femxpa3.cc/enter/register","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"title":"t33n leak 5-17 age"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T12:09:03Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"b.yzcdn.cn","ip":{"addr":"154.85.69.57","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"Singapore","country_code":"SG"},"domain_registered":"2014-12-08","domain_rank":425969,"first_seen":"2015-07-08 11:30:49","last_seen":"2023-10-23 14:59:32","alert_count":0,"request_count":1,"received_data":9753,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-06-27 18:12:05","alert_count":0,"request_count":6,"received_data":5325,"sent_data":1962,"comment":"","tags":null,"fingerprints":null},{"fqdn":"femxpa3.cc","ip":{"addr":"104.21.36.146","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":13,"request_count":13,"received_data":486673,"sent_data":6581,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20 07:02:03","last_seen":"2024-06-28 08:52:36","alert_count":0,"request_count":6,"received_data":214942,"sent_data":3887,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fems76xar.cc","ip":{"addr":"172.67.136.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":10,"received_data":55580,"sent_data":5680,"comment":"","tags":null,"fingerprints":null},{"fqdn":"matrix-client.matrix.org","ip":{"addr":"172.67.2.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"1994-11-02","domain_rank":167763,"first_seen":"2019-10-18 17:57:30","last_seen":"2024-06-26 13:32:01","alert_count":0,"request_count":2,"received_data":2821,"sent_data":1078,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.sectigochina.com","ip":{"addr":"172.64.149.190","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2019-10-20","domain_rank":0,"first_seen":"2022-02-25 07:42:56","last_seen":"2024-06-12 14:18:51","alert_count":0,"request_count":1,"received_data":964,"sent_data":333,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"femxpa3.cc/js/app.63544e23.js","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"866c491453ccb5387c95d3abff2def05","sha1":"e821b02009cbb5a0e94ac93fc472deb43bb7086e","sha256":"915d5df2f789d94deb940976a91b1733feb450299257a2dccd22f2d467f65612","sha512":"646f30aedb465be31c9daad92505671acbd851f25752e8ae8e96a41c530594145278a27f25e04a4e1aa5497368f104755ba3f03d53483b034b41ee66f5841fba","ssdeep":"1536:4TN+h7R2W79QZEwwS4TRTUhkTrTOcTR4YqRr:4TA95Q9wS4TRTzTrTOcTRGN","tlshash":"6204fab7de45e90c0e15450639b911c1b3b33b59da6740c6f3b4e6982be18b8362e78f","size":175070,"data":"","first_seen":"2024-06-28T09:04:01Z","last_seen":"2024-08-19T18:58:33.263479Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/js/chunk-vendors.ea790e22.js","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fee178f809d1b2a829099a8bb91c56c","sha1":"178b6322fdc40c08fcbda0c096c668855ad49b51","sha256":"c3580c9951b9554639c1404a246b3f27f818a99240c728f04cb964cd9e50b73d","sha512":"965985bffe1e9a2254888c7eadb7e896a0e78581ac728ca8c0d38fb673ceb302205573a9bff914acd7c1cb7bc6da32ed4cb5409dbf6e3eecc98fb359c28e8cdc","ssdeep":"6144:SCUOs30tR08Fg3iLLbQdqyWwEZwYLGX4yZI9Go/IudP0Pz+CNdQKKbqmM9wszi1I:SmsEtR08F7eRE2+UFPS3KKMhsgAPFDy9","tlshash":"c8151a89b281b075439770a4806f110ab2376d5ca40ad198f67df4e9af7ca8d6137f3e","size":949174,"data":"","first_seen":"2023-03-07T01:35:40Z","last_seen":"2024-08-21T09:33:17.508651Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"af527f2223418a780a2b1141877d40c0","sha1":"bf8b887b7adaadfb21b95794a547f3cb4e19de02","sha256":"f249999106c586410085e5aafe0e14f9ac3eefa9aba3a966c9cacde371fd3ad9","sha512":"33d931fc3a73329a063884458e6f88cce06df2f0196738124706aed386860032edd0f0fb5dbb0c23cdbbfa382e94596ff213cbb7aa91da8560847c06a2bc0b5f","ssdeep":"","tlshash":"5b8000a0ac8030b028288802e3f02028a3020820202f000382a22be8bb220820038a00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.166758Z","last_seen":"2024-08-19T18:57:54.166758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c5b0f7962e3842cad209e46a0dee43d0","sha1":"3272bbda5efc6c1daca514d1f9e757601800d759","sha256":"9ccbd11867dba1d3e7983e1a7025938655610ba8cfad04e09d816ab99df882fe","sha512":"c1c0c9949e1d61f8f1f980ac604adfbd8b6e28e0f0a0cad38127d641c24f1bfc1717a8899863b0138abb45363f4ffd21c17c1d5da92fef7d9825b355fd9eb173","ssdeep":"","tlshash":"278000a0e88030b0a82a8a02e3b82038ab020820202f000382a22bf8ab200820038b00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.167475Z","last_seen":"2024-08-19T18:57:54.167475Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"457ca81d9963692006980b13c78af9eb","sha1":"2d4d80565caa4cb29bc785c605f05bf1f538ce34","sha256":"2f4dc3c762f31e27d6a8ad2018aec6e016e542e8ddc4764e1fd0e59bf4e398af","sha512":"9b4cbf3c9a7acf42209046f9fb235551667a9f2f7f62dd8aa1dd1bf9f669105d34adf1dc9edb541823944840e04fd6e56811ef2035c6010e254e4377016d994a","ssdeep":"","tlshash":"b48004505450307415144440d170111453410410101f0003555157dc55100470034f00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.168208Z","last_seen":"2024-08-19T18:57:54.168208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c2dc88d5c4d5db28c16374a2220a1b45","sha1":"4639fb3831af717dd26fc1348e2f91e77dab4671","sha256":"2131e721a4d14b76752be7f0bd79fecf09ff8a9ff858bc9d83ac2c5f653c0ce9","sha512":"a652f8b3274844a9baeea66dbe59f6f23bfec0b42c316053f5e8a2671c7f10ccfafe96cd274e103a47b3919963ba1eba2492dba50d2b9754ea6d0ff7aade2249","ssdeep":"","tlshash":"c68000a0e88030f028288802e2b0a02ae3022820202f0003c2a22be8aa200c20038a00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.168825Z","last_seen":"2024-08-19T18:57:54.168825Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f49db60fcf4080958ebeb4e1ddd7999c","sha1":"6bd320e2d0df09919e20fb741df68728430800ba","sha256":"398eb7585de09ed394f1c5e0b2d23a42144e1bc2a917726c55aef1bab4a514fd","sha512":"0e188931d554b55796e296d0e3e5382d7224db2f2ab170cb69d005d2cd7d2ef4f713ab3bd9c1cebeb0688ad35c79ac58e79a9c0891585679d8bd42c3776ca28a","ssdeep":"","tlshash":"ac800450d440347354144501d170101c53010414301f0413415117fc55100430034540","size":28,"data":"","first_seen":"2024-08-19T18:57:54.16946Z","last_seen":"2024-08-19T18:57:54.16946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8954f382a1f7fb062816a82adf55f0c9","sha1":"bebbf0c77b4265bbb71e9956de95094217170fdf","sha256":"ec000bd716f606ea3a1f8c8d8f15ea61cfbc04681692823e1cdf337c4bdc8193","sha512":"612e6358308d1e025e0f1b396fe9e754751d08922e8b753d5b63409fc8d93518daa5eb97a0bfba72f83b4897c1482bc806d3aef3166c13b6a25df3842b07fe56","ssdeep":"","tlshash":"2a80045154403070141d4400d170101553410411101f0503415537d455304414034500","size":28,"data":"","first_seen":"2024-08-19T18:57:54.170108Z","last_seen":"2024-08-19T18:57:54.170108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"038193556710d3f72231d84de3fa00c6","sha1":"44894539e5188644804f9f2f4561e103dfcec524","sha256":"7bdac0d9ba44aacf4fde79687c84691302c27d7e6c513d5ea8b81d992968d157","sha512":"87b39f8b1c2bf46384242268eaf14b7aa74d2f4be1c6cd4cce59b9d34f318516188e3f5d23f857e452bdb1201b115db1c153c2f66b257edd2613f5e348f6bbb1","ssdeep":"","tlshash":"bd8004d0545030f114144401d170505453114470101f0443c15117d455100410134d00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.170775Z","last_seen":"2024-08-19T18:57:54.170775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bd14a40c0a646a407fafb44133c01ddd","sha1":"d16e8c80a49671dfec16e390038884e526fc61b8","sha256":"f1fbdfb9ef3116d4dbe33dc1a0c8c6963772a432376a096a2107460b701800e4","sha512":"aaa45ff80d25cc9ed70f4cd91c8ab984994dfa81d68a948118862b46f4cccad75a832f0e3804cc61e7e6cbe32b996028659ac84c8a54f2fe478a1961c124038e","ssdeep":"","tlshash":"dc800450544030f074144441d170101553050411101f0413415117d475500410034510","size":28,"data":"","first_seen":"2024-08-19T18:57:54.17138Z","last_seen":"2024-08-19T18:57:54.17138Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-05-09T04:38:05.561688Z","times_seen":700434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b3e6034bccbee3ce0ed7694b0f27ef70","sha1":"57f3ea77ece18f9300c085db648211aa4d94c3a5","sha256":"5c61e42802507ee3fb8f1a43dbd53aec1c0bca0a9239d9f6b41da093bdbb5bec","sha512":"d245e971cf29d5a77578389214be873853e7d83f321dd816e58014ffe113c54bbf380d2f453178d94d1c8315654dc60a178346790fef65d15fed8db7e1c2be52","ssdeep":"","tlshash":"398000a0a88032b0282c8802e3b0322ca3022820202f080382a22becab280820038a00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.175196Z","last_seen":"2024-08-19T18:57:54.175196Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ef6be509c7c7e8cf8cf5ed69ff9c3091","sha1":"de310f8fff4d23133db5acd66c8153d1f6efbff1","sha256":"d7b5a08fa0dc9aec010d173df5be04cf88bc2ccdc2802cec07607bb086daa803","sha512":"24f8f425f5c06336c1a0c1a3e7d8d89f8c7227cabcf0216ef652e24ac7ccf16e2147969501f6061c32cc6a50ed34483d390e367efff51e91657b5587f8e9bcd3","ssdeep":"","tlshash":"c48000a8a88030b3282c8800e2b22038a3020820202f0003aab22be8aa200830038ea0","size":28,"data":"","first_seen":"2024-08-19T18:57:54.175957Z","last_seen":"2024-08-19T18:57:54.175957Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8af0d566c352d711c3df36e30ad1d55d","sha1":"a0c12c19b8f78b0572c87d4bd0c6f40af361777c","sha256":"bf3597314c8fc9af973161737add51f265eb155c23322ee6a2241fd00a982583","sha512":"4ce180a8e0b444fa1154d7cfc0b55242e21a1f9572a289c4ee84e002580c2402c8d6a860efa8b17535464fd7b7e743ac0cd02ec00cb2a560adb2d82ef26f46ff","ssdeep":"","tlshash":"3f8000e8a88032f02828ca00e2f02028b30a0822302f0003a2e22bf8aa200820038a80","size":28,"data":"","first_seen":"2024-08-19T18:57:54.176699Z","last_seen":"2024-08-19T18:57:54.176699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d7d8ca7b080de0f07a6eda8cc1bd64ef","sha1":"afd8c6301a088b92d803672e6c1455a25dfbdc42","sha256":"da596ec3cb071e9a2dbfa18790eabbc353921fb7edd3244e2d8ad09be0015a43","sha512":"e95ae12254e678c00f9bc44d801933ec7157f3bad189a896b064bbca0f8cbb5485a8ae54635237220d44483e15096d9acaf1d854394d91e9caca7fd2590951c9","ssdeep":"","tlshash":"ac8004505c50307414144400d574101453410410105f4003415157d555101410034700","size":28,"data":"","first_seen":"2024-08-19T18:57:54.177332Z","last_seen":"2024-08-19T18:57:54.177332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"de0a4c84e5b4108ba948a449e27fc180","sha1":"84fe1e4c61e643b621962c2bf6b60e6336fb772a","sha256":"8f1a27f553411cc95dc312a51f93849edb85cdacd7faad755a2562b5f3f5c9ba","sha512":"d348f0ece4cb18b6499b740f12ea8149d5229c3b4416af5701a034b08c792da9af01de7e402275baccd28c1a4fda51a29dc524ee191da885c55f96246dd5d367","ssdeep":"","tlshash":"908000b0ac8032b038288800e2f02028a3220820202f000382ab2be8aa32082003ca82","size":28,"data":"","first_seen":"2024-08-19T18:57:54.17798Z","last_seen":"2024-08-19T18:57:54.17798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d487d41625f5171a67a0d9a9578f7fbf","sha1":"cf305319e45f432876e785983950a7dfdc1487e5","sha256":"fd037e24baef47d4a5a38fc7cd7013bb16d2dfd866658fb9b9f7bea9699d3248","sha512":"85b792e773b6c2d58a5c89edb9c249a2be66bfb2676c1f084d57ec162caabb693cb17139f8bd27858aa17885d6a30c4d95e4a8e7b3a7b013388f3a374eb043f5","ssdeep":"","tlshash":"7e8000a0a88038b32828c880e2b0a0a8a30a2830303f200382a22be8aa200820038a00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.178698Z","last_seen":"2024-08-19T18:57:54.178698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6c22cb2919cdc0352d9dec8f7d8f7d41","sha1":"1f8b59f6b72cad77f68e42e046f0605cfdf97daf","sha256":"62eabac64a9bec59f83e409bb9d5511ce5effa7c50d4b0595759d3619ec65fdf","sha512":"3105e0e149efd39675c8e7e4ca03614861646e755c4412993e9cd5f1df2417782d4ff9d0e442448ec336509edad7dfba3f16ccdf11d8481beef2d73318d99a19","ssdeep":"","tlshash":"998000a0aa8030f028288800e2b0202aa3030820202f0a0382a22be8aa3008280bab00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.179455Z","last_seen":"2024-08-19T18:57:54.179455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d9dc1accd4826f81346516cbf67d0407","sha1":"759e126dc2c51e20d8481fa52d91af497bf1aa6c","sha256":"60aeeccb76a98998e26c2a285bcd25a038f452757ebf29c02ffe14bd7b611ddc","sha512":"86f18f273058439b0954635a6925356c410b97d71726ef5aa37eee81902e4d962fc7693410071ec66b9b1e3200f30a116c5c93456719d081f5a09e058c964531","ssdeep":"","tlshash":"9f8000b0a88030f0282a8802e2b0a028a30288a0202f0003c2a22be8baa0082003aa20","size":28,"data":"","first_seen":"2024-08-19T18:57:54.180259Z","last_seen":"2024-08-19T18:57:54.180259Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4334664ab5e6082c444ae27932b81b65","sha1":"068342ec34493f632746dbf5223ff07aa907d6c6","sha256":"90eb83d146bd529a7b5493f7d856917babb9886c6fb06a2f262bc879a3213d89","sha512":"3ee818a863cc6fb681d86f0e898ae570a8bc0040872e0355cfde1590e5df349dcda6089fcb2cab83989b524ee0b7a7e904e6f9690d25393d788e71a4fe95ec7a","ssdeep":"","tlshash":"958000b0b88030fb28288802e2b0a028a3028820202f0003c2aaabe8aa200820038f00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.180885Z","last_seen":"2024-08-19T18:57:54.180885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c86e2ad41c237ee4f0274170eeec085c","sha1":"eda96bde5c60746e5964a81d2c88470a456f18ca","sha256":"826a2f37ab8109f303510f0c0b4273e2dde0a84f72a9095d5f554d03aca22c46","sha512":"bef8c7e60273ae3dccf212d2f90f418df6e21386ef0efd5e944fc7a60e4a5a950640261f76198ade194c66c580ad672002eb827c7f060fcc09960d812034c57b","ssdeep":"","tlshash":"2680045054c034701c145400d170117453110451101f0003417117dd55100d10034504","size":28,"data":"","first_seen":"2024-08-19T18:57:54.181657Z","last_seen":"2024-08-19T18:57:54.181657Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2bae14e6c87d97494d6d6eadbf7a9371","sha1":"d7ce3444fed44cfde8cd5316c9e1b73be063da70","sha256":"e620a2d48df3afb67cf47b6dca4f338c44cd5f817c0315d47bfdb67dd1276f1d","sha512":"948da8daecfb12917326c625bc3e6701631ed24442f7aef8949138e5e1a702558750dd9acc7d3f27f83c09c9e0c9045643a724e5d6dde581f78aa91649f21fd9","ssdeep":"","tlshash":"288000e8a88030b028288800e2b02028a3020820202f200382a23be8aaa008200b8a02","size":28,"data":"","first_seen":"2024-08-19T18:57:54.182392Z","last_seen":"2024-08-19T18:57:54.182392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"823581a452c3fcc0e6836658f3bbb1ed","sha1":"c5efb3cb9d82ecdd7765f86ad6cab5ae1604a89d","sha256":"d8465f0ae331fc73d623185843c6ffceab16882f7f30b780755ab6fdf9edf17f","sha512":"b8d8ed10a664b42f711584842fa3fc546f407e487db26fc91f696f8a2cf02ef7e8b1e48f7b0aac60bfdd1510ec2f11f89d4a5cc52aeac5cb1a263c359faf22f9","ssdeep":"","tlshash":"418004505440307014544400d575101453410410101f4013455117d4571004300355c0","size":28,"data":"","first_seen":"2024-08-19T18:57:54.182998Z","last_seen":"2024-08-19T18:57:54.182998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7e7d48ed7e3832bb5dddd4f28ef21747","sha1":"66fb60b9f1a2715b93b40c6e2c4da0f0f0c5b3b5","sha256":"fe740011c5aceb212457bf0d77c7e87b8ddf05ce295d41fcd61a284a49c82d1c","sha512":"a91764f66635131d3c2989ce1457b700eb636411cf85f2286f0727e9448299bde48417ed0046a6bad6a94430ded99908a95d871bb617da2ce66ad63dfd1911e7","ssdeep":"","tlshash":"52a0020fb83719898246987078372909262d3d98448452a056a609a50b50287508de66","size":61,"data":"","first_seen":"2024-06-20T13:05:19Z","last_seen":"2024-08-19T19:23:20.41022Z","times_seen":1232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a32a9fa40edd0852e8ae0bafcf49fa68","sha1":"d8754fb7e56b731bacd612657bb97f71954348c3","sha256":"53b29a8bd9c542d0b02e205f0b10a4fe6f0b51a872fc22c2faf5fc3577559da2","sha512":"be29b232a06941d3dd85b1a44ffc8cb40c0acbfb17fa4f64e08729f8237b9e0adcbc9ad354fb90371d8a7e6746d2137b9feddc1f785bbc6ba9508b83a587d96c","ssdeep":"","tlshash":"768000a0a88030b02a288a08e2b020baa3020c20202f080382a22bfcaa200e20238a00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.185143Z","last_seen":"2024-08-19T18:57:54.185143Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ff0be350d6917021377bf293e82e7f5c","sha1":"95e73719c262b140b14636a407d8f7e3fcc6b6a5","sha256":"2871873281d8dd7d733f5b898ba7b900810fb213391ebedfff75f55a157a826e","sha512":"66421757b53fbe1ee57c03115bf3005f86fc61969b0022990cb296513e36edc043f9a76833bc14eea84a6481eeecb1e524c99eee9820c0a3e957e2ba8f9d1f9c","ssdeep":"","tlshash":"008000a0a88030b0282c8800e2b02038a3820820202f200382af2beeea200e20038a00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.185962Z","last_seen":"2024-08-19T18:57:54.185962Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6e268ad9e2bf299dc0c5ad78883c855a","sha1":"1b23f36df4bcb1ebbcb34e475dba5603aad3c7c7","sha256":"085142ce72e0a552834da3533e874500b6632d3461e3b0b70d1e9d89267c3bdd","sha512":"dc9d23c403fe3ed0f58539c67ffa8dd5b4645b55ca5454701186a940c880ecd415ad5f24553f1b8116f2fa783af214c0adb4e8ddcc9af537c6f24ef42e0be668","ssdeep":"","tlshash":"8c800450544030f054144441d170105c53010451111f0413415117d555100410034500","size":28,"data":"","first_seen":"2024-08-19T18:57:54.186688Z","last_seen":"2024-08-19T18:57:54.186688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"50e81bbc52ac52ad987d35fdaf658903","sha1":"d8836a166d151dcffc1f4a27980676b27bf863bd","sha256":"bfcae1fe7ed6fcdf6ec3a44dbdd48763f8f3ff6a8426f24a996aba5d700a6d00","sha512":"bd778d655be746a3476a3d17c287a286ab7c1221e48cb86c6279633d52b6f50163edfd075a6a44f0578ea38763c9bac5256b32c236ba31e2e362f255dcaae3a9","ssdeep":"","tlshash":"038004505440307054154401d175301453010410141f4413415117d455100410074551","size":28,"data":"","first_seen":"2024-08-19T18:57:54.187512Z","last_seen":"2024-08-19T18:57:54.187512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"554313b89cc702c27b719213ca002962","sha1":"f19010b68ffaa70faf4724fffb68edcb3dadc113","sha256":"35e3669a43a965f7d65e3e425701587410b8b5142b25540ba642b94ef6cfa375","sha512":"4ade29a6b8fa4f1b1a9b23b35dff4613f693e8563fbd8cc2200a32caaea1d1f99300977c231bd6202531b78534597487fdc3c62d6d936a4cafe975b5b7f89560","ssdeep":"","tlshash":"4551d8a07a543371967608e32e0f049f447e56309bac74929706e9f16c97ed4603af49","size":2816,"data":"","first_seen":"2024-08-19T18:57:54.188212Z","last_seen":"2024-08-19T18:57:54.188212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6fb6d025e213fce0c530f34720ea4d19","sha1":"7c15893362dfb58c4e699c57af5541b1ce76366b","sha256":"aa4200f5d14d90da654823fbdbd4362baa3dfc5d01453e16923a17b07f7c8268","sha512":"a4bd352f29ef29bf83c9ef092b4ca0d40e591de6a754f5ed813da710964607fca2a5403d244805033ae59ee5338d5dda26acddbf4fff1584daf33b812b4ebd09","ssdeep":"","tlshash":"f68000a8a88030b028288880e2b02028a3020820202f000382a23beaab2808200b8a00","size":28,"data":"","first_seen":"2024-08-19T18:57:54.188904Z","last_seen":"2024-08-19T18:57:54.188904Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:19:59.530190509Z","timestamp":1719559199530,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"97F30DE1FA8E41BF859BA482AF92CEC319429E14F4F81A9C675977B672ED7B9A\"\r\nLast-Modified: Fri, 28 Jun 2024 01:53:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11430\r\nExpires: Fri, 28 Jun 2024 10:30:29 GMT\r\nDate: Fri, 28 Jun 2024 07:19:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"11d12f1fba8aca9d9418e9d8dc4952bf","sha1":"815abf5c4b5eb6f908e3c9aa829ee2e6ccdcc449","sha256":"97f30de1fa8e41bf859ba482af92cec319429e14f4f81a9c675977b672ed7b9a","sha512":"925d61aa340b7ebfca1e3f63127c3aba709a71abe936e0e36cb3ee77a4825793300198f4f66759aea3ae63b360385ea7dfeb894010672de8630a24a9b1691b3a","ssdeep":"","tlshash":"18f00587119e7b0e577c24327f52dbb41f0c09a734453476bbc057e7b0a876605c844d","first_seen":"2024-06-28T08:56:03Z","last_seen":"2024-08-19T18:58:45.824809Z","times_seen":33870,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:19:59.962925492Z","timestamp":1719559199962,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7DD2781A8624CA9B8C54539A3C46C44CDD86477DE3078E4DAB624BFC7CE5B7AE\"\r\nLast-Modified: Thu, 27 Jun 2024 11:47:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=16398\r\nExpires: Fri, 28 Jun 2024 11:53:17 GMT\r\nDate: Fri, 28 Jun 2024 07:19:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"116ef0f15d988075de9127b4d85aeeac","sha1":"cd431538d40d2097891757fd0ca8c06b576051e9","sha256":"7dd2781a8624ca9b8c54539a3c46c44cdd86477de3078e4dab624bfc7ce5b7ae","sha512":"df5ba3c67e56a4bb2deb671c7220e6d61eba39803f94d366758af9ff08918c5e2485c1a6ba108aa92c5ce1ac00c28b9235bb95181f47bccb5a9753bbc583e594","ssdeep":"","tlshash":"acf005d632fabc407f7d27242cd5cf5c3a09f9eea071a6d5388002d1a411f941e80448","first_seen":"2024-06-28T08:58:49Z","last_seen":"2024-08-19T18:58:45.825448Z","times_seen":28794,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:00.221724693Z","timestamp":1719559200221,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"BB1019AA57AE13A1711A36128A9CD37FBA1ED8DFA97BEF742765067F4ED17D50\"\r\nLast-Modified: Thu, 27 Jun 2024 04:21:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=16519\r\nExpires: Fri, 28 Jun 2024 11:55:19 GMT\r\nDate: Fri, 28 Jun 2024 07:20:00 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"1a0a218c9c80fb05585b4f6c937a462a","sha1":"e888eb5099221806dda66adb4bf792f352ef6610","sha256":"bb1019aa57ae13a1711a36128a9cd37fba1ed8dfa97bef742765067f4ed17d50","sha512":"902dc1c1d456f9780a825a5e2c5fa5ff5b7acdfa621e4716a8dec307268d544631f1999d75de75e77a8e2cc6b4233188002309a5afd148971f277cd8d61ac21b","ssdeep":"","tlshash":"45f005e917d57c5177602c983c78e33d1f111f6c7841a5cf64a046b7a904f866d94058","first_seen":"2024-06-28T08:58:50Z","last_seen":"2024-08-19T18:58:38.910292Z","times_seen":15194,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"104.21.36.146","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-06-28T07:20:09.728Z","timestamp":1719559209728,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: dsK/fmzqlBUBSRpw6hg+8CHq63YLH3iQ7rb4QKw2/OsdiWQPUEvMgEKh6YFkKHRnQclEGSYWmuvtbaUIAFsqa2RCh1IU6S1hB5xXad79zHg=$v6X088uaG+j7Py5OH8eTDg==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=R3WiqwW7LnxcWDS1w1CjlnhEK94eypJDbDJXSWFxDrYb1wQP9crGcP7t29EgUoMI5yHPy26B3I%2Bmr5mPQiyUuAZaQMAFx1XA9J7xioVVZC8ewn7n8Jv%2FkcRu162S\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9696b5b0b06-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5755,"size_decoded":14091,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14091), with no line terminators","md5":"5e11f20b0e16ad4cd22bc46bc1acea1e","sha1":"6787481c66e00b27688834b5d770466e28fe0dea","sha256":"5262bf3596a59b97f17c0f305bb39e1fdc37512aa4004e4d1f44fc994b7ca393","sha512":"e54aa781a82da6d90fe699f874c5523a3a501628a0f7b47454dbdf14795fa91b6d86d90fa0a79db5cc741f1ca710a0632ff458658116f7e88a1e7f589be512df","ssdeep":"192:PNxyShvK9moqTJkNrv235j5WKSTZrV38bD41AxyJN:yShi9boJkNzS5UZrVw4+ON","tlshash":"60522967da02105b75374f6b30a9f9605128f384f70253bdf0a69e1887cca1b2a963e9","first_seen":"2024-08-19T18:57:54.132465Z","last_seen":"2024-08-19T18:57:54.132465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=89abe9696b5b0b06","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:00.640655351Z","timestamp":1719559200640,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=89abe9696b5b0b06 HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://femxpa3.cc/?__cf_chl_rt_tk=UTuUQFCdJirOMJdQzBFYENZlg4aJMP0cDVlp048XI3M-1719559200-0.0.1.1-2260\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:00 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VjRVQMxdrOxgkbZeoSlb5gptLaxs%2FEJ57SLw0dcddT%2FDbdzeeNJLjArVTKF%2BiE%2BlR%2Fd2slhXZXbALTe%2FdF%2Fl6s4Q%2B4cnPVCgqlHsXIvflxjFyIlgXdwgF8AebNwq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 89abe96b3d621c16-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":103642,"size_decoded":371295,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ebd59a40ab79db5db7dad5194aa1989e","sha1":"b726944ad01506c3a0fcada2224a26f1e3db455e","sha256":"a888268109480592a1dd6e25ad472dfeaf4b00e151797c8950ef603bec9e9f2d","sha512":"2baa8219b62add63e17a60c5486f6922dd8fdb682ffd9fa203b8166b50aaa0964b503f0b1bfe4b40ab27760132b085e8a3456bdf9d6906a4f5364a29d9be7f51","ssdeep":"3072:W6o5xNzfwUoYTQ6IYzFCVbVX1+w2w02BfDOGv/0va7uzCw2upreHlv2HcHhcCETr:gfnjMbVX18w0Q6L0M3Uv0+D8J0BZHz2","tlshash":"55844fcc0795f99454632e3cf1237322a1af1e164db898d9a84471451afe32fc6daacf","first_seen":"2024-08-19T18:57:46.793491Z","last_seen":"2024-08-19T18:57:54.133501Z","times_seen":2,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/favicon.ico","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:00.719024733Z","timestamp":1719559200719,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://femxpa3.cc/?__cf_chl_rt_tk=UTuUQFCdJirOMJdQzBFYENZlg4aJMP0cDVlp048XI3M-1719559200-0.0.1.1-2260\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:00 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: EXPIRED\r\nLast-Modified: Fri, 28 Jun 2024 00:21:07 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YkQmU62mQokmjmcSvXmcCXx7sm8yQfrwhVGqrGhgCiQBZ%2BpQZEot48%2BUXRBqRhA%2FdEJvzyJCOffyJzlMUO9O6ot9FkUDqx1a%2Frz70U7a%2FyEzIqm1gkn7XU6BexsL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe96b8d9b1c16-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":995,"size_decoded":2707,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2707), with no line terminators","md5":"8f91383b3a300dcc0698caf764023777","sha1":"9780db2726b6b2c801f3afa1594f08713dd342fd","sha256":"d74addba024620552b7b7a17582e8d748d1ce5e26a66659f0db93c082382ca55","sha512":"91815e52de3655206c7cfd491fa2543e462701084e39997735aba50f1fe4421ec8ce8ee6b1519b2c176523ab6de08b108e2a392a0295ee3ca73b0d67d23bb45e","ssdeep":"","tlshash":"de51ffa38920a88e5320da7afd27f04dc992994ac958ec9176ca61fe18f0ed18573771","first_seen":"2024-06-28T09:04:04Z","last_seen":"2024-08-19T18:58:33.257723Z","times_seen":5,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/favicon.ico","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:00.726867582Z","timestamp":1719559200726,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://femxpa3.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:00 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: HIT\r\nAge: 0\r\nLast-Modified: Fri, 28 Jun 2024 07:20:00 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SBwrRYOdOyG5LluN5qpR31qz2lHNPtN5zPKnVZl%2ByTRFf6BffbqkExNfrRfrpXRR1VdICK5ldPQm46Q7Kk45wvAwf5jxGUOnm8XvASDJSQTeUjX7QCvaX%2FqNZtdi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe96c7e841c16-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":995,"size_decoded":2707,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2707), with no line terminators","md5":"8f91383b3a300dcc0698caf764023777","sha1":"9780db2726b6b2c801f3afa1594f08713dd342fd","sha256":"d74addba024620552b7b7a17582e8d748d1ce5e26a66659f0db93c082382ca55","sha512":"91815e52de3655206c7cfd491fa2543e462701084e39997735aba50f1fe4421ec8ce8ee6b1519b2c176523ab6de08b108e2a392a0295ee3ca73b0d67d23bb45e","ssdeep":"","tlshash":"de51ffa38920a88e5320da7afd27f04dc992994ac958ec9176ca61fe18f0ed18573771","first_seen":"2024-06-28T09:04:04Z","last_seen":"2024-08-19T18:58:33.257723Z","times_seen":5,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/cdn-cgi/challenge-platform/h/b/flow/ov1/1194203264:1719555872:BxbmLmXkVlGleY47AZj4BmUHxB2Wf5G8c1JiqiV0HS0/89abe9696b5b0b06/5c80c3b1be2da7e","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:00.842369947Z","timestamp":1719559200842,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1194203264:1719555872:BxbmLmXkVlGleY47AZj4BmUHxB2Wf5G8c1JiqiV0HS0/89abe9696b5b0b06/5c80c3b1be2da7e HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://femxpa3.cc/\r\nContent-type: application/x-www-form-urlencoded\r\nCF-Challenge: 5c80c3b1be2da7e\r\nContent-Length: 1612\r\nOrigin: http://femxpa3.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:00 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-chl-gen: Rx2RQcN778kRxhBOcsmNziJctW3bRxXH4Vfwn+3jwJ1bX6J3Jchigdyi2UGTHUtb$uXeW4WJB/owRtFNxa1tr2w==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zTrRGeLVgl8oMjD8JBFSrn5C9oQWOs%2BnGtZ4HeZggkIxc563i11Hppsd3%2FDwmt3aMJxjxZVieIXKRPzlTdv7OMwpHPatnrkHAhgXYPdQfh6DD96OLCVt2b859cjM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 89abe96ceee31c16-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":12392,"size_decoded":16424,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (16424), with no line terminators","md5":"e7542b150e786d0a9db45b268e873994","sha1":"439bd84d0629b5cbace9f0eacbf278eddcd48da1","sha256":"edde54937e29c8938bbd75ff04317c4fca7009451332b7b8c39bd104d5692b4f","sha512":"bbc5f35d800bfe14317ef59c4afae9cc625957605132bb50208e32e435ae7d66ef988cc3da9c1e2b5bda83f5179274e253c4123086f45bb0c42a9515cf643b94","ssdeep":"384:xmY++hODeVXJiQqMTs+dfR5k+uolsxh++4oeOlub9KnfsvUxe:x0+hODWXJ/TTdp/qh++4o/Uge","tlshash":"8572d0540ffc6df5df85070a558307cba20337ee4250abb6288217c27faa9762f6c914","first_seen":"2024-08-19T18:57:54.144865Z","last_seen":"2024-08-19T18:57:54.144865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8wqbv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:01.214861009Z","timestamp":1719559201214,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8wqbv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Jun 2024 07:20:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ndocument-policy: js-profiling\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\norigin-agent-cluster: ?1\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nserver: cloudflare\r\ncf-ray: 89abe96e6913b50f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":18331,"size_decoded":79247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (42151)","md5":"579e094a70de65da81bc5793b65dc046","sha1":"30ad0d7120ca65b188baf6ea779d1bd074d726c7","sha256":"f51551235264d649b6b07bb3474ca5444a941925f11b8d911b2e85653854f2ca","sha512":"c3c34dec031fa404e909fff52e985d53cbac0fbb53d86244a197c8f1d20476b366ed222828dd07afa4bcba99e4d537c695bb0a59d31c50e9b62b4d6061e091c9","ssdeep":"1536:3aRnKgI6EDjeunATe0peonpgwe+IFTTdhf3i5SnREAupig73hpp2IaMCPHnKrpVL:0nbjEvvSWwtMxi/bU7Y+m7YYXYjtcfAc","tlshash":"f273e7d9cdbc3d59bb029729b1ce50e2632d67471945f498b48ca180cfad14e26f0f7a","first_seen":"2024-08-19T18:57:54.145544Z","last_seen":"2024-08-19T18:57:54.145544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:02.608951746Z","timestamp":1719559202608,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"04084AF9826CD228BA177D0494C67853A9535C6B85B0D764BD0C691325B408A5\"\r\nLast-Modified: Tue, 25 Jun 2024 17:32:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4593\r\nExpires: Fri, 28 Jun 2024 08:36:35 GMT\r\nDate: Fri, 28 Jun 2024 07:20:02 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0dca6d3ecc4eafb5f6322320e0c24d66","sha1":"58717c4f75983833a00d6a40866c5190b2c21c33","sha256":"04084af9826cd228ba177d0494c67853a9535c6b85b0d764bd0c691325b408a5","sha512":"0563add55ed1e23d41f51d4a1114ad6f44a14bc486a8508aa95d771ac59755985b61e1449382ccc5350a6d0c256cce26b0fbb100576dbcee21a06baf776d25c8","ssdeep":"","tlshash":"13f00e1606f07d022b703c12fcd6fa6d1e302eef30819ba0789196d1e4a2be80bc808d","first_seen":"2024-06-28T08:58:50Z","last_seen":"2024-08-19T18:58:45.827698Z","times_seen":2655,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/b/c7e29c8c8b6e/api.js?onload=AUFp6\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:02.63914649Z","timestamp":1719559202639,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/b/c7e29c8c8b6e/api.js?onload=AUFp6\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://femxpa3.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Jun 2024 07:20:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Wed, 19 Jun 2024 17:35:52 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 89abe96cea340b45-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":14872,"size_decoded":42646,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42645)","md5":"c9b9b8d1382f8ebb60c396dd27d06c30","sha1":"c3600b6d612df83ba61677c657058a0c70eea92b","sha256":"fdf9b58fcf84b6c75c42ba56855fb02e0a990771aa1932c18a0fa73ef640000a","sha512":"2277eb4b21a4170b5ab2239f1710e51da1d383cec3f15a8f99d7cd893c068cd35c01d41cfc360addbbb900ec3c9a1c70105e4486473deb14759837bcfc6331d2","ssdeep":"768:PCoL1znQzCLmx0BsMILdDodBvKBN8P6ifvO95nPcQ+aoh0aKoS4HRGU5KdF:XQzCyx0Bp5vKBB95n5","tlshash":"16132b983156787217ea41e0717ba343b325ba35f44ccc50d827d96536acdcad233faa","first_seen":"2024-06-20T13:05:19Z","last_seen":"2024-08-19T19:23:20.265073Z","times_seen":958,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:02.641453347Z","timestamp":1719559202641,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"04084AF9826CD228BA177D0494C67853A9535C6B85B0D764BD0C691325B408A5\"\r\nLast-Modified: Tue, 25 Jun 2024 17:32:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4593\r\nExpires: Fri, 28 Jun 2024 08:36:35 GMT\r\nDate: Fri, 28 Jun 2024 07:20:02 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0dca6d3ecc4eafb5f6322320e0c24d66","sha1":"58717c4f75983833a00d6a40866c5190b2c21c33","sha256":"04084af9826cd228ba177d0494c67853a9535c6b85b0d764bd0c691325b408a5","sha512":"0563add55ed1e23d41f51d4a1114ad6f44a14bc486a8508aa95d771ac59755985b61e1449382ccc5350a6d0c256cce26b0fbb100576dbcee21a06baf776d25c8","ssdeep":"","tlshash":"13f00e1606f07d022b703c12fcd6fa6d1e302eef30819ba0789196d1e4a2be80bc808d","first_seen":"2024-06-28T08:58:50Z","last_seen":"2024-08-19T18:58:45.827698Z","times_seen":2655,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:02.643794715Z","timestamp":1719559202643,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"04084AF9826CD228BA177D0494C67853A9535C6B85B0D764BD0C691325B408A5\"\r\nLast-Modified: Tue, 25 Jun 2024 17:32:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4593\r\nExpires: Fri, 28 Jun 2024 08:36:35 GMT\r\nDate: Fri, 28 Jun 2024 07:20:02 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0dca6d3ecc4eafb5f6322320e0c24d66","sha1":"58717c4f75983833a00d6a40866c5190b2c21c33","sha256":"04084af9826cd228ba177d0494c67853a9535c6b85b0d764bd0c691325b408a5","sha512":"0563add55ed1e23d41f51d4a1114ad6f44a14bc486a8508aa95d771ac59755985b61e1449382ccc5350a6d0c256cce26b0fbb100576dbcee21a06baf776d25c8","ssdeep":"","tlshash":"13f00e1606f07d022b703c12fcd6fa6d1e302eef30819ba0789196d1e4a2be80bc808d","first_seen":"2024-06-28T08:58:50Z","last_seen":"2024-08-19T18:58:45.827698Z","times_seen":2655,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/254522574:1719555785:nAy_lo2B-eIG0zFQiMB7OwNniWOHmD4LkBjuGPfOWI0/89abe96e6913b50f/c357c6cc9fe0d00","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:02.693958311Z","timestamp":1719559202693,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/254522574:1719555785:nAy_lo2B-eIG0zFQiMB7OwNniWOHmD4LkBjuGPfOWI0/89abe96e6913b50f/c357c6cc9fe0d00 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8wqbv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal\r\nContent-type: application/x-www-form-urlencoded\r\nCF-Challenge: c357c6cc9fe0d00\r\nContent-Length: 3320\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Jun 2024 07:20:01 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 8DUfTouDdTN+iRFzem6gWzpWvhDPFds0GppAkFEw3Emkl83Eg7s2XGoDXqSHuCZgkNBMPFawB0XmqpjDaRaaFMLQPX7p8Tb1I5qATX/rlslHDZj0jEGuOKw/WBkZk/CjSBbVJDt6tVWQqukftb9Ft5gYG4CES2SI55I+YI+ApODrKzzjBzIeHtWHn85oJNKY28r60vpcXRmQMHfP2Zad9zc3szcBbfcuQsqcRv6gZRwRR8alC7e2aO/WGEVg7+8C+EdqZiQwDwET4F9hOdo5HMeWWl4JrAqH8CQBu9aU5nX2AYljnP6WoQdTsczD6XmUcphYUzl1NwOG1EZ6D9CexFjulBTNWs3dbICW/3ntiSK/yzYjTNiIVuoAmEIvLYk3E0Mdq5pVP7gl9sZ+tugLFYNTBeZUEHsrfIpVjyV3W7NfxE2RArF9hJKLAf1+6IMj$sHFICPVA7kt1F9gKf4UEWA==\r\nserver: cloudflare\r\ncf-ray: 89abe9710c92b50f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":83913,"size_decoded":111552,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fdadec8f4278a32c57d40560d29d0355","sha1":"68e0332cc02ec23048cde41bda4340c6fc749cf2","sha256":"460c8bb52666baf469c6098f95dc3e763aa8b4cc8bd2ecd2546858926232edd8","sha512":"55a1a2f7fcbbffad354be050e9575e52c57ed961421b47be6401e312263837f87707a5836835a8429dbbc8d6131a9ba8944edc27df2a856914df51e568f5255e","ssdeep":"3072:A0cEhueUMnPgoaBc3Kqj9jR7m5CyQx+3UcZkWPmTvD:A0cEMeUGPJaKDzLfx+xkWeT7","tlshash":"37b3022fe923134ecad14327575d18479782fb9a142280f65dfe2886cac9d04f7b4ee8","first_seen":"2024-08-19T18:57:54.148156Z","last_seen":"2024-08-19T18:57:54.148156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/89abe96e6913b50f/1719559201463/8DP5JvB7z5yvakt","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:04.698974933Z","timestamp":1719559204698,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/i/89abe96e6913b50f/1719559201463/8DP5JvB7z5yvakt HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8wqbv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Jun 2024 07:20:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 61\r\nserver: cloudflare\r\ncf-ray: 89abe9854b4eb50f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":61,"size_decoded":61,"mime_type":"image/png","magic":"PNG image data, 22 x 77, 8-bit/color RGB, non-interlaced","md5":"bf13741ca637e48e280a150fa68da891","sha1":"a0782da33764fbe3c39729ff088add244f614649","sha256":"c2274aa3484c7f2c9600b43b5ef3c9ed86e15d81c130e31e9002c0cd298affff","sha512":"3009e67fb3c1540f577ad02d6ab63bfeb2fdbde8c5af1f789cb86a9710a170ad03669d9ee2d050355bb8b79e7c188edbdb556396380c460ab98166a8af9ffc14","ssdeep":"","tlshash":"44a002eb73d07c38dd46063b6a254056e83b151406255649c805c42d161b36c84d4f42","first_seen":"2023-05-10T18:08:23Z","last_seen":"2025-05-12T09:28:57.46161Z","times_seen":79,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/254522574:1719555785:nAy_lo2B-eIG0zFQiMB7OwNniWOHmD4LkBjuGPfOWI0/89abe96e6913b50f/c357c6cc9fe0d00","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:09.405536254Z","timestamp":1719559209405,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/254522574:1719555785:nAy_lo2B-eIG0zFQiMB7OwNniWOHmD4LkBjuGPfOWI0/89abe96e6913b50f/c357c6cc9fe0d00 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8wqbv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal\r\nContent-type: application/x-www-form-urlencoded\r\nCF-Challenge: c357c6cc9fe0d00\r\nContent-Length: 27627\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Jun 2024 07:20:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: UpgEvNLi3oHztAmdEmH/h/CF8vNz09QNuUfU8Cg42lmgZgRFLJeIy6/PoFiAWzw1$dI8j8JAJYZUvXUIsUPbtbw==\r\nserver: cloudflare\r\ncf-ray: 89abe9873d48b50f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":24361,"size_decoded":22192,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (22192), with no line terminators","md5":"c5e2933cb71a75a40fd0870b1f0408ba","sha1":"52044066b511a015ca3fc3a771a9825a3397628d","sha256":"9b057940fbd16dece93b9b275fe2bbd95ae4e2d0d16c9846c5d3800862fdf371","sha512":"c45596ec1987b1e8fbd95e73e296635dcab5ace46a39e34f2bb2abdfd495785fd9d5aecd5d4fc326b87d4570c33ab32ecc2f5f74c79c137243859d6a5514dbab","ssdeep":"384:fLKfRJHdWX5gRmXLNycmpfJegXRy/kVrVTpL28Mbn18qtpCF9dV3ILJ68mzgG:fLfW2o9Xo/+rb7MPtE9jiQzgG","tlshash":"b6a2f1ee7dd82cff035761a3165468a618c48cf8ba710bf104d148e4153f555aef949f","first_seen":"2024-08-19T18:57:54.1507Z","last_seen":"2024-08-19T18:57:54.1507Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=89abe96e6913b50f","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:09.703406097Z","timestamp":1719559209703,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=89abe96e6913b50f HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/8wqbv/0x4AAAAAAADnPIDROrmt1Wwj/light/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Jun 2024 07:20:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nserver: cloudflare\r\ncf-ray: 89abe96f5a56b50f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":70116,"size_decoded":201036,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"938fbea1587073783f5b90aafbc4a496","sha1":"e96bef57fd48f03d0a0084ad4580e11d667812c2","sha256":"37546692674c72e1fe0c8fc1eb5fc0f65d4285bfe10badeae08a5b4dd2ecfbc0","sha512":"71e217502c6ac6034abb2c4bc99f2b193c69a27f1bf6a7231bf55f6200518d02a49172e5830963777c171cb14b82c25b46775419dabbc70c7e0e8fc1dec268ef","ssdeep":"6144:scJvRWM1AzydZozyoiyauCaQhfaNilpxP:pogKwpxP","tlshash":"6214a5cc67c5f96811233d38b4273253b0af5e155c3848ddea54b1c429fa37d81eaaae","first_seen":"2024-08-19T18:57:54.151642Z","last_seen":"2024-08-19T18:57:54.151642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-06-28T07:20:09.728Z","timestamp":1719559209728,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://femxpa3.cc/?__cf_chl_tk=UTuUQFCdJirOMJdQzBFYENZlg4aJMP0cDVlp048XI3M-1719559200-0.0.1.1-2260\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2726\r\nOrigin: http://femxpa3.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:09 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: cf_clearance=wwrTyYOt7rpP0mMhTm4w5Tk6XpIkmYhw2P3buoU7iPE-1719559200-1.0.1.1-YHqrdfqZE_6XbOxKIF0lsBkOLi3NIU1cfxxkp.ZR3R8foK0kfUUDJsb61OIGNkZ9xrgj7uf5q8xh6plBmOs90A; Path=/; Expires=Sat, 28-Jun-25 07:20:09 GMT; Domain=.femxpa3.cc; HttpOnly\r\nLast-Modified: Thu, 27 Jun 2024 14:51:56 GMT\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1gAlBcpYGrxvP%2Fo3JEN8%2BrYr2LmKS%2Ft3KdQ0SnP5JnAnoUHBg3dLsedre5QltcM4BcANzQzg%2BoloAINm6n5SdmKhyoqvF5G%2FRUAI7FJHvc3S0xz55BynJuDO0qCh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 89abe9a4cba41c16-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1001,"size_decoded":2707,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2707), with no line terminators","md5":"8f91383b3a300dcc0698caf764023777","sha1":"9780db2726b6b2c801f3afa1594f08713dd342fd","sha256":"d74addba024620552b7b7a17582e8d748d1ce5e26a66659f0db93c082382ca55","sha512":"91815e52de3655206c7cfd491fa2543e462701084e39997735aba50f1fe4421ec8ce8ee6b1519b2c176523ab6de08b108e2a392a0295ee3ca73b0d67d23bb45e","ssdeep":"","tlshash":"de51ffa38920a88e5320da7afd27f04dc992994ac958ec9176ca61fe18f0ed18573771","first_seen":"2024-06-28T09:04:04Z","last_seen":"2024-08-19T18:58:33.257723Z","times_seen":5,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/css/app.209474f5.css","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:09.944Z","timestamp":1719559209944,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/app.209474f5.css HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nCookie: cf_clearance=wwrTyYOt7rpP0mMhTm4w5Tk6XpIkmYhw2P3buoU7iPE-1719559200-1.0.1.1-YHqrdfqZE_6XbOxKIF0lsBkOLi3NIU1cfxxkp.ZR3R8foK0kfUUDJsb61OIGNkZ9xrgj7uf5q8xh6plBmOs90A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:10 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 27 Jun 2024 14:51:30 GMT\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: REVALIDATED\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kU6qdbkAhHXIWjRwSe6M5gJf%2FYUji8smozCQWXidj8qHuO1q6ThkQRq%2Fyf5B2z7sE7pOWsev7hfcO0ehlW5mzDvngyqrLuBxxxmwsTlftmxXof7UD4TrI6hRu0gD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9a61b20b505-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2625,"size_decoded":15613,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15613), with no line terminators","md5":"e063428993e679de45316a8029108ec6","sha1":"d258edddbd0732870cca6d392f36e4c25d1ce1e5","sha256":"854a822fd11d5fb86dbca87d072b9e7f5b91a2fda333de29da3912409ab554fd","sha512":"0cc5c214dcc405f659c18a749d408bb95fa0f252a06b0cd7fd9f47d1449909446936477f3a93b735c32ce38165405e53db3c7362e009b9083dfa038a2712ef83","ssdeep":"384:DT580ws0z0Z0BIG5zUM86a7io07OW5uvbKVzk8lz9up0flz3:DdHws0z0Z02G5zUM86a7io07OW5uvby3","tlshash":"cc628227fa8d3115f57bc5f6bca1ab4ea214bf43e1870a61694353724dcb19b33292c8","first_seen":"2024-06-28T09:04:05Z","last_seen":"2024-08-19T18:58:33.266906Z","times_seen":5,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/js/app.63544e23.js","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:09.936Z","timestamp":1719559209936,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/app.63544e23.js HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nCookie: cf_clearance=wwrTyYOt7rpP0mMhTm4w5Tk6XpIkmYhw2P3buoU7iPE-1719559200-1.0.1.1-YHqrdfqZE_6XbOxKIF0lsBkOLi3NIU1cfxxkp.ZR3R8foK0kfUUDJsb61OIGNkZ9xrgj7uf5q8xh6plBmOs90A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:10 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 27 Jun 2024 15:05:48 GMT\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: REVALIDATED\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g8y3vWe6xrv0jDOsNz8%2FAOZzbOUVkofhPT0PZezvH0h0o%2Fiz0eT0W9lYxcPCW51v1XoUyDKcrwQ%2BS0VMXsHBLB8yo5f2V505CFvV2T3mCAVhdKynAYqgOsqwk9MO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9a6196d5699-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24585,"size_decoded":175070,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"866c491453ccb5387c95d3abff2def05","sha1":"e821b02009cbb5a0e94ac93fc472deb43bb7086e","sha256":"915d5df2f789d94deb940976a91b1733feb450299257a2dccd22f2d467f65612","sha512":"646f30aedb465be31c9daad92505671acbd851f25752e8ae8e96a41c530594145278a27f25e04a4e1aa5497368f104755ba3f03d53483b034b41ee66f5841fba","ssdeep":"1536:4TN+h7R2W79QZEwwS4TRTUhkTrTOcTR4YqRr:4TA95Q9wS4TRTzTrTOcTRGN","tlshash":"6204fab7de45e90c0e15450639b911c1b3b33b59da6740c6f3b4e6982be18b8362e78f","first_seen":"2024-06-28T09:04:01Z","last_seen":"2024-08-19T18:58:33.263479Z","times_seen":5,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/css/chunk-vendors.c57533e1.css","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:09.941Z","timestamp":1719559209941,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/chunk-vendors.c57533e1.css HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nCookie: cf_clearance=wwrTyYOt7rpP0mMhTm4w5Tk6XpIkmYhw2P3buoU7iPE-1719559200-1.0.1.1-YHqrdfqZE_6XbOxKIF0lsBkOLi3NIU1cfxxkp.ZR3R8foK0kfUUDJsb61OIGNkZ9xrgj7uf5q8xh6plBmOs90A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:10 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 27 Jun 2024 14:51:56 GMT\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: REVALIDATED\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4i67Hfx5JgsQ38abf7Oqng1TAu8FLk5UNuCSmHVn%2FYFrTlA4HFcXC7AN2Oa9frZf8JB%2FJxd0Y8qaAEHRDs2B0Q1Qol0vDVItXwsfrSi6ENFThSvY1faPWlw2caaT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9a618e1b517-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43872,"size_decoded":156544,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ebfffebc1f62c3be51082e6595a0a005","sha1":"e278fbd6fd48150b3f366b50ed388983d934978c","sha256":"f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32","sha512":"ec1ffe3ba3da9f1db52f5bee312f94d09389d7f518234ca14712e2a7533f640264307382d3b2816e5c258b77581f6a4fc856895095067b83f5c4cd3c9d57219d","ssdeep":"1536:PeN5J+jOkiHcZiNEBVcZH5NHMja4drYEXfh1tRdsVAlWE:PgeVc5HMjajUfjXvlWE","tlshash":"ece3e92b8ac0235cb217ce615fc4a7d8c228c571e5920ef9f21376298fcbb86159675b","first_seen":"2023-04-05T23:34:09Z","last_seen":"2024-08-21T09:33:17.50638Z","times_seen":1144,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/js/chunk-vendors.ea790e22.js","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:09.933Z","timestamp":1719559209933,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/chunk-vendors.ea790e22.js HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nCookie: cf_clearance=wwrTyYOt7rpP0mMhTm4w5Tk6XpIkmYhw2P3buoU7iPE-1719559200-1.0.1.1-YHqrdfqZE_6XbOxKIF0lsBkOLi3NIU1cfxxkp.ZR3R8foK0kfUUDJsb61OIGNkZ9xrgj7uf5q8xh6plBmOs90A\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:10 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 27 Jun 2024 15:16:47 GMT\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: REVALIDATED\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PvBlzLMieaqG%2FtiI9bfDxEjifOkyvOn8MMSFoKEhe0VTTQ8amNozW0DWcoyEOGzC7NYvjdZ0%2FuoI5MWbZluOa44pGG1nipxQA0V28VPxCg%2F5TSyMdUHg4cu%2BOYuL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9a60cfb1c16-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272420,"size_decoded":949174,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51759)","md5":"4fee178f809d1b2a829099a8bb91c56c","sha1":"178b6322fdc40c08fcbda0c096c668855ad49b51","sha256":"c3580c9951b9554639c1404a246b3f27f818a99240c728f04cb964cd9e50b73d","sha512":"965985bffe1e9a2254888c7eadb7e896a0e78581ac728ca8c0d38fb673ceb302205573a9bff914acd7c1cb7bc6da32ed4cb5409dbf6e3eecc98fb359c28e8cdc","ssdeep":"6144:SCUOs30tR08Fg3iLLbQdqyWwEZwYLGX4yZI9Go/IudP0Pz+CNdQKKbqmM9wszi1I:SmsEtR08F7eRE2+UFPS3KKMhsgAPFDy9","tlshash":"c8151a89b281b075439770a4806f110ab2376d5ca40ad198f67df4e9af7ca8d6137f3e","first_seen":"2023-03-07T01:35:40Z","last_seen":"2024-08-21T09:33:17.508651Z","times_seen":1004,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"172.67.136.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:10.758999013Z","timestamp":1719559210759,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: L1g31kAbHMT5nMN9fCoV8Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: 3CiWTEpWJgTYBeQWE3wUsWbdCE994y3qzqVmQnY8mWfTKGhf7Al6QsEZE7dqt0OqIVc7xyS+MPsGmR0qiG0fiFLYSrQWY1n4iMpjX7pOayM=$2ZVvVei3t1Je3njC6ApKzw==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B7B8fDeQSWMIYTnZFLIukrgsWehkNK6nNHu0AEaQh%2BdVXmcSCWbxXiB%2FIXSJoSOpQWfps%2BugzudbSKr%2BSIz%2Fy63cl84n9EUfv20umiTWkLnZYvcRfrKqIMx2QM%2FXEBE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9ab1f070b3d-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":6987,"size_decoded":16026,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16026), with no line terminators","md5":"9634594cb92470f2b5e0eea54793e35d","sha1":"80201a577999d9242f419e3c56c0670f89870192","sha256":"b5df2941d2534a7da364077af24d9dde2008ea1db3670168b02ea01684f46475","sha512":"9bcfe52496d60e3ca91abbbdd09aa010a208d0aaddfb8e26c491d546e78ea29e96c1865b47cedb15ab538d7300a0981fc3926c469178faf79669828cf07233f5","ssdeep":"192:PNxyShvK9moqTJkNrv23WCJQZipU/2GnQ0n1PYnPrp1L/WhP6EOjhamy11yrN:yShi9boJkNz4Da1Q0nGrpCy7hYAN","tlshash":"39724a77ca42100f79374f6b71b4f5609225b384a30713aef0779e5896cda1f2a923e8","first_seen":"2024-08-19T18:57:54.155717Z","last_seen":"2024-08-19T18:57:54.155717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/getlog","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:10.668Z","timestamp":1719559210668,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /getlog HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/enter/register\r\nCookie: cf_clearance=wwrTyYOt7rpP0mMhTm4w5Tk6XpIkmYhw2P3buoU7iPE-1719559200-1.0.1.1-YHqrdfqZE_6XbOxKIF0lsBkOLi3NIU1cfxxkp.ZR3R8foK0kfUUDJsb61OIGNkZ9xrgj7uf5q8xh6plBmOs90A; inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:10 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Pqy9bk9R%2BrqOj2uO%2BcujYp3nZKQybrXnSShK14%2BV%2B2XyOFH1k61DC7xcNh11Dgwp4DCymM3JTfcgt3FFuV%2B5DECsfOx26Zs0ulojL9jKXO55rCM0dRf3Hh7AIXyr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 89abe9aaa8a71c16-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1287,"size_decoded":11968,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ce2c97f222c52cbd454219532b577f06","sha1":"6e060453cab76db8494aacaeaf62d9feb0d42086","sha256":"9ab1a8f6e96c48617e6f52f38cc2c07301310eb3688a9f62b454cb20cf96de6a","sha512":"45686e524831d9f7e9190f60813dd1b1e2a90075dc16e684549f2eee153decf2496dad6113e266d4ce8e3b8da0ac9a0060389e4281059fb5b78e70fd8cfa69d1","ssdeep":"96:GjVCKJi/OlxS/ofGWZEJhp1o50dIOxrJY6DzkZEtom3SzFZ92rqE1quVZ7x:sXJi/uc/oflSJhg50dJTDzkhm3IFkFtf","tlshash":"4332b3a82bf0752c21382884edb13dcb95cd6139cad04ae6ffcb9e5e30255951ddb362","first_seen":"2024-08-19T18:57:54.156413Z","last_seen":"2024-08-19T18:57:54.156413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/img/icons/apple-touch-icon-152x152.png","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:10.960Z","timestamp":1719559210960,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nCookie: cf_clearance=wwrTyYOt7rpP0mMhTm4w5Tk6XpIkmYhw2P3buoU7iPE-1719559200-1.0.1.1-YHqrdfqZE_6XbOxKIF0lsBkOLi3NIU1cfxxkp.ZR3R8foK0kfUUDJsb61OIGNkZ9xrgj7uf5q8xh6plBmOs90A; inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 4046\r\nConnection: keep-alive\r\nLast-Modified: Thu, 27 Jun 2024 14:52:02 GMT\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: REVALIDATED\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W2iapTuH8fuU4O4z2H1VfPBkVqKYrRxCBvArWWSpANcEcqJStUV2VcNRSUquWruHaVfPoSRESNcY7PzBqZy%2FnxnhiJ9Zlbu0gjWrhyfIKYLLdQPmrwzqWfSW1x7Q\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9ac7a241c16-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4046,"size_decoded":4046,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced","md5":"1a034e64d80905128113e5272a5ab95e","sha1":"92328e60f63d690f33cd4961b9934a539dc29b82","sha256":"4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135","sha512":"663dccaa2273e1b381f202d9a47c850565289c7e663c511c3936e5609de51fcb61e1d088660ea9befce2609dbcd3ad6f815d043a87631b31fc596d0b14dfce86","ssdeep":"","tlshash":"e1816eddfa9cc6df85131d9b016f6185f83da0565efc3d06a4bb8d0a6822a601b017d5","first_seen":"2023-04-13T00:26:43Z","last_seen":"2026-05-08T22:59:52.22212Z","times_seen":1586,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matrix-client.matrix.org/_matrix/media/r0/download/matrix.org/MFjDZhRjHsgfJDTiBPyAEjYp","fqdn":"matrix-client.matrix.org","domain":"matrix.org","tld":"org"},"ip":{"addr":"172.67.2.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:11.120965299Z","timestamp":1719559211120,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /_matrix/media/r0/download/matrix.org/MFjDZhRjHsgfJDTiBPyAEjYp HTTP/1.1\r\nHost: matrix-client.matrix.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 28 Jun 2024 07:20:10 GMT\r\ncontent-type: application/json\r\nsynapse-trace-id: 7f46985b634c16f5\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Authorization, Date\r\naccess-control-expose-headers: Synapse-Trace-Id, Server\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: sandbox; default-src 'none'; script-src 'none'; plugin-types application/pdf; style-src 'unsafe-inline'; media-src 'self'; object-src 'self';\r\nx-content-security-policy: sandbox;\r\nreferrer-policy: no-referrer\r\ncache-control: no-cache, no-store, must-revalidate\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 89abe9ab28da56bd-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1105,"size_decoded":1105,"mime_type":"application/octet-stream","magic":"data","md5":"5e8691aa139dffcccd788c6132cc8b06","sha1":"5a2abf8ad1330be6f6ac3188abeb5c1305e7497b","sha256":"23824be73725a2506d884363dc7696c8dca304ffc37e175d0eb18f0e24134471","sha512":"ed7a1b40cd4e45031c2fcf1d0fe6e9b12aadd2f8f359b48237346ce6704799f73e6b512e38147a2dfac66357da7f69ef52d238d7937a88627606c50871f589f9","ssdeep":"","tlshash":"8a11864752c89a74cc85c1a021ce12238a41bdfb6c4b4ca89725aec99844d3f442e61d","first_seen":"2024-08-19T18:57:54.157912Z","last_seen":"2024-08-19T18:58:33.272207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.sectigochina.com/","fqdn":"ocsp.sectigochina.com","domain":"sectigochina.com","tld":"com"},"ip":{"addr":"172.64.149.190","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:11.525734281Z","timestamp":1719559211525,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.sectigochina.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:11 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 472\r\nConnection: keep-alive\r\nLast-Modified: Wed, 26 Jun 2024 12:42:45 GMT\r\nExpires: Wed, 03 Jul 2024 12:42:44 GMT\r\nEtag: \"a51f3ac2349340877b1c6f61cab6143cd215d170\"\r\nCache-Control: max-age=450753,s-maxage=1800,public,no-transform,must-revalidate\r\nX-CCACDN-Proxy-ID: mcdpinlb2\r\nX-Frame-Options: SAMEORIGIN\r\nCF-Cache-Status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 89abe9af8fee56ab-OSL\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"64ed9bc7b99e5d4641a428a6b9f2137b","sha1":"a51f3ac2349340877b1c6f61cab6143cd215d170","sha256":"ab46d45a00cb864237f66f1fb88b87fc3c671c720013a9809897c383773ae0ea","sha512":"c5c7edd4fee0d3aeda331a67434008027570e0097ff6a009da40cdfd7532a9ad5bd18d31668db6e977c88c4c184e55832e13429eaacfcb3967007572fbfb7a79","ssdeep":"","tlshash":"eaf0d4a38e2230114148343fefda50a51ac4e5f505641495687cd9dd80a3b6a130df08","first_seen":"2024-06-28T09:03:54Z","last_seen":"2024-08-19T18:58:33.74176Z","times_seen":50,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.yzcdn.cn/vant/icon-demo-1126.png","fqdn":"b.yzcdn.cn","domain":"yzcdn.cn","tld":"cn"},"ip":{"addr":"154.85.69.57","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:10.560Z","timestamp":1719559210560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.yzcdn.cn","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Thu, 09 Nov 2023 00:00:00 GMT","end":"Mon, 09 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B","sha256":"8F:82:6E:D5:B3:3D:E4:86:5D:DF:2C:53:25:66:11:24:E4:90:98:24:8E:7F:82:F6:93:07:A1:AD:ED:96:2D:C4"}}},"request":{"raw":"GET /vant/icon-demo-1126.png HTTP/1.1\r\nHost: b.yzcdn.cn\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Jun 2024 07:20:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8886\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=2592000\r\ncontent-disposition: inline; filename=\"icon-demo-1126.png\"; filename*=utf-8''icon-demo-1126.png\r\ncontent-md5: +HxG80alVIIkzL4La9dd9Q==\r\ncontent-transfer-encoding: binary\r\netag: \"Fo6Li9S6PmtshVfZSnJgYf3WJJL9\"\r\nlast-modified: Mon, 26 Nov 2018 11:08:05 GMT\r\nx-reqid: YyIAAAASg9geDiAX\r\nx-svr: IO\r\nx-qiniu-zone: 0\r\nx-log: X-Log\r\nx-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC165_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC46_DE-Frankfurt-Frankfurt-11-cache-4\r\nx-cache: HIT from BC46_DE-Frankfurt-Frankfurt-11-cache-4(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8886,"size_decoded":8886,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f87c46f346a5548224ccbe0b6bd75df5","sha1":"8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd","sha256":"b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370","sha512":"4852e453726de2f2c4481aaa661df24d111ce49e8f57e1fd8d23bd7db93ff78561a31d894ff6148ddbdd7ef9d99dafe0d7371b567aa7112a770e18ed17ab41dc","ssdeep":"192:T1ejBaEeCInIUI6F3BGA7sHrx6c+IYJY3mgE039sK/oeNo/vc7ga/:T1eFF+I+3A0U7E+9sKpkvcd/","tlshash":"5402aec508505081342287a9d818707d2a9aa626da7e0787ea6c3650ceb09f6f85bff0","first_seen":"2023-04-30T23:44:28Z","last_seen":"2026-03-19T20:01:49.172817Z","times_seen":1192,"resource_available":false,"data":null}},"time_used":1963,"timings":{"blocked":966,"dns":517,"connect":25,"send":0,"wait":26,"receive":3,"ssl":422},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"104.21.73.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:11.93007419Z","timestamp":1719559211930,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tg+oDNKEcVTmfpFFVWq17w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: Juzp7+Q4NKXppxck/wByYL8BI740xrMewFkg6YyHEeqcRnfAKDBmUwRC+nq+b26DaaveakwP60BstfIxO4TyFHvJfLpU9xRmaZZa75nTmNo=$NbSRpcKMnijnuzjStSgKSQ==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N9ENkB8D7%2F%2F7GUKE56qznL%2FJBxTOOkr52RAjk0%2F0P0AFPKIpX9PnGioevjeyCzf%2BRQUAWZeZ%2FgkVcw9Epcjc%2FGGxUPxzBQn2p66WzltT1A1nwdhdqqZv3o2kuxPUei0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9b27ae35696-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":7001,"size_decoded":16047,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16047), with no line terminators","md5":"a49543c738c5ef2b47878f9dc97e1b89","sha1":"a04b977f9789c241112cd3f9449f0fea0da2e6b2","sha256":"9a23c5607fc31e8e6c7c00fe71ef21cb8eaddf40b2f1c1c1da1e58450bd681ae","sha512":"4b50726266eab03d4e0b61541b449958dd0c5758fc8328097c093a4364bf7325c203b9e68f2fad0aeab5ea2c9946dd346b44adefdf2c2f2b0b1c8a736ac04822","ssdeep":"192:PNxyShvK9moqTJkNrv23A0FO1g4pRqWDw4hGVgoaKgUhbiyjyxN:yShi9boJkNz0iXqWugoaK3hb9aN","tlshash":"c8724b779902204b76374f5b70e5f5649224b384f70352faf0669e4897cca1b2a963fc","first_seen":"2024-08-19T18:57:54.160277Z","last_seen":"2024-08-19T18:57:54.160277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"104.21.73.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:14.132881636Z","timestamp":1719559214132,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9673CZyzD28WoZZxKs/epA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: 6iUwUOaXrWE1SrXbD43N9MxUJ5tJH9gtG1ooujQussDJ+/0svV53OZJuhMX/Tq2JezhP/5wVdkLuGh/9wd9a/mAbVEAJVBwxBhy74mQE4oU=$mvu99+l8uBQ4d2OGzksKeQ==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Hf7hWwnU7dcLmlbP8aVGVS9QDHZ5bnG98F4E0l2lfahTHmC3H0LA6Nb8cHgbZocnG7q82f1exS58WDemPd7Gnsw%2Bo2qjkAiBvfVPGRMMwxkv%2FPWy2vtqP7XISbp6tj8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9c02b5456a4-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":7382,"size_decoded":16474,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16474), with no line terminators","md5":"804a720ef79460a463d9fde406974c72","sha1":"32890d3d761a7d7a84dd60f7b8257d201807ec51","sha256":"87981f5963fac0cd5a64d32c6a1f49401adb7d7337b0b95bb86aa80ccfdddac8","sha512":"f66120aaad8d60be4e9ae63cb9bfec5a9d47851aedfa4bf2a42f43debf4402e5a4e7cce022f99453a7f88be995f71788c62a91e1ad03d3a55e76aeb00f61b285","ssdeep":"192:PNxyShvK9moqTJkNrv23aeTFTL4Zr2ihHaTZ/ZLp/akxTyzyVN:yShi9boJkNzt4FcyitY9ZLIkxOGN","tlshash":"e4725cb7d606205f35374f6b70a8b2609034b394e70212faf1769e0c97cd95f2aa63d9","first_seen":"2024-08-19T18:57:54.162826Z","last_seen":"2024-08-19T18:57:54.162826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"104.21.73.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:17.739809173Z","timestamp":1719559217739,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: PFmzZf8LQfx89WIH+B2hew==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: qn981uORVFaM8wfAviz3eSCgjpe/7lX3aqavzaFDCJdtq8zAp6Nl0g38Kr102/5maaEH62KlawgyposHhuCjlBfKrQrUpRb9dqn8NLTV6qI=$aXZs8Swh35FpuK3N435W4A==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cx%2BLW0FzzoSqnK6eXdAXmuIUgzWAje31ORH299BNt1fNJSC3fyIpJlvIkcntQztwA0qxLvQDGu0PigayQgtn9NneFOUE9iw67i2uTGJAh%2F88LZZimaIdbts%2FAUOawAk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9d6cf7956af-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":7000,"size_decoded":16048,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16048), with no line terminators","md5":"c0be4edb22a6ad0403cfba33b4caf787","sha1":"776ee84fff62aa76f170368f096e1f2564d7c724","sha256":"1df522df957b3deed0dc74a8f36ceca7c2acbd794ca78dddadb1febe1b73208f","sha512":"0ad81e253708cf627b9a49ff9c083178962d84c84b3aa29ab1c555825dd1df5a1e59cb93e4380b7f9d3bf56143648dbac6472d0f49098cf67d8d66a6eb91de0d","ssdeep":"384:yShi9boJkNzhaL8ewSlwAkqRdJeVSqG4N:QoJkTRAkiHeVN","tlshash":"78724b67da07205f32374f5b71a9b5509139b3c4a70387baf0a69e0887cda0b25963ed","first_seen":"2024-08-19T18:57:54.163579Z","last_seen":"2024-08-19T18:57:54.163579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"104.21.73.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-28T07:20:22.261873899Z","timestamp":1719559222261,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 8dtoCWU9Ajw9SIH/2nI4mw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: uju+Gg8cW62868yzOElRKB24MOUmTLAJV0EwxsA8/NHmyPA5imDR0lw2ZmA+tqnxDxRtT25S5xdSBrZy9G+qXX0nXp7C+lyg9Mqz7mLVeRY=$s3gedBFEVmCn+xeAI4/dWw==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=crzrc1s8IUiNc0obwM3E53JTe1aQaLmoOVbXNM%2BbGZRFck5rAf0lXCB0QjXDrbkngD7O2%2BJJlvhj8IxdbrG%2FPvvf24mkSaiooTpAg6gB8oPYU%2BNQoHD752s%2Fr4p6uNQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9f30aea569c-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":6998,"size_decoded":16048,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16048), with no line terminators","md5":"a06088a2e8ca7c28fabe21eede606ba6","sha1":"fc4573f2b4c5d6e971eea4fedb1ad546b26735f8","sha256":"9ad140781fe736e73799597fec94aca459cc01c90d383b2e2eacd468663bd46c","sha512":"b121a956b079350dbdd4c9db32a0bf4ad9250f9db7c4d7b36fb73e450c6dc114c7b7698dbea21708611d6c864066203852744557076cd503bba9c50fec240cfc","ssdeep":"192:PNxyShvK9moqTJkNrv23tKRYXnTtv5eMOOStXVPyIy2N:yShi9boJkNzIZTtRkE+N","tlshash":"73723a678a46205b36374f2b20a9f9549128f388f70253faf1779e0887c8d1f25963ec","first_seen":"2024-08-19T18:57:54.164511Z","last_seen":"2024-08-19T18:57:54.164511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"172.67.136.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:10.678Z","timestamp":1719559210678,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fems76xar.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Jun 2024 13:10:53 GMT","end":"Tue, 24 Sep 2024 13:10:52 GMT"},"fingerprint":{"sha1":"52:05:C3:AC:C9:55:B2:30:3F:90:8A:74:61:77:BE:EB:2E:E0:B7:61","sha256":"A5:B9:02:3B:23:96:34:4B:C8:20:D0:A0:DB:88:1A:05:C9:01:A7:74:22:00:EB:AB:93:27:B5:25:60:D3:FA:DE"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: L1g31kAbHMT5nMN9fCoV8Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: 3CiWTEpWJgTYBeQWE3wUsWbdCE994y3qzqVmQnY8mWfTKGhf7Al6QsEZE7dqt0OqIVc7xyS+MPsGmR0qiG0fiFLYSrQWY1n4iMpjX7pOayM=$2ZVvVei3t1Je3njC6ApKzw==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B7B8fDeQSWMIYTnZFLIukrgsWehkNK6nNHu0AEaQh%2BdVXmcSCWbxXiB%2FIXSJoSOpQWfps%2BugzudbSKr%2BSIz%2Fy63cl84n9EUfv20umiTWkLnZYvcRfrKqIMx2QM%2FXEBE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9ab1f070b3d-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T04:38:20.583528Z","times_seen":14873834,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":30,"connect":30,"send":0,"wait":9,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"104.21.73.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:11.889Z","timestamp":1719559211889,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fems76xar.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Jun 2024 13:10:53 GMT","end":"Tue, 24 Sep 2024 13:10:52 GMT"},"fingerprint":{"sha1":"52:05:C3:AC:C9:55:B2:30:3F:90:8A:74:61:77:BE:EB:2E:E0:B7:61","sha256":"A5:B9:02:3B:23:96:34:4B:C8:20:D0:A0:DB:88:1A:05:C9:01:A7:74:22:00:EB:AB:93:27:B5:25:60:D3:FA:DE"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tg+oDNKEcVTmfpFFVWq17w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: Juzp7+Q4NKXppxck/wByYL8BI740xrMewFkg6YyHEeqcRnfAKDBmUwRC+nq+b26DaaveakwP60BstfIxO4TyFHvJfLpU9xRmaZZa75nTmNo=$NbSRpcKMnijnuzjStSgKSQ==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N9ENkB8D7%2F%2F7GUKE56qznL%2FJBxTOOkr52RAjk0%2F0P0AFPKIpX9PnGioevjeyCzf%2BRQUAWZeZ%2FgkVcw9Epcjc%2FGGxUPxzBQn2p66WzltT1A1nwdhdqqZv3o2kuxPUei0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9b27ae35696-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T04:38:20.583528Z","times_seen":14873834,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"104.21.73.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:22.183Z","timestamp":1719559222183,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fems76xar.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Jun 2024 13:10:53 GMT","end":"Tue, 24 Sep 2024 13:10:52 GMT"},"fingerprint":{"sha1":"52:05:C3:AC:C9:55:B2:30:3F:90:8A:74:61:77:BE:EB:2E:E0:B7:61","sha256":"A5:B9:02:3B:23:96:34:4B:C8:20:D0:A0:DB:88:1A:05:C9:01:A7:74:22:00:EB:AB:93:27:B5:25:60:D3:FA:DE"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 8dtoCWU9Ajw9SIH/2nI4mw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: uju+Gg8cW62868yzOElRKB24MOUmTLAJV0EwxsA8/NHmyPA5imDR0lw2ZmA+tqnxDxRtT25S5xdSBrZy9G+qXX0nXp7C+lyg9Mqz7mLVeRY=$s3gedBFEVmCn+xeAI4/dWw==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=crzrc1s8IUiNc0obwM3E53JTe1aQaLmoOVbXNM%2BbGZRFck5rAf0lXCB0QjXDrbkngD7O2%2BJJlvhj8IxdbrG%2FPvvf24mkSaiooTpAg6gB8oPYU%2BNQoHD752s%2Fr4p6uNQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9f30aea569c-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T04:38:20.583528Z","times_seen":14873834,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":36,"connect":1,"send":0,"wait":8,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"104.21.73.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:17.705Z","timestamp":1719559217705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fems76xar.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Jun 2024 13:10:53 GMT","end":"Tue, 24 Sep 2024 13:10:52 GMT"},"fingerprint":{"sha1":"52:05:C3:AC:C9:55:B2:30:3F:90:8A:74:61:77:BE:EB:2E:E0:B7:61","sha256":"A5:B9:02:3B:23:96:34:4B:C8:20:D0:A0:DB:88:1A:05:C9:01:A7:74:22:00:EB:AB:93:27:B5:25:60:D3:FA:DE"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: PFmzZf8LQfx89WIH+B2hew==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: qn981uORVFaM8wfAviz3eSCgjpe/7lX3aqavzaFDCJdtq8zAp6Nl0g38Kr102/5maaEH62KlawgyposHhuCjlBfKrQrUpRb9dqn8NLTV6qI=$aXZs8Swh35FpuK3N435W4A==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cx%2BLW0FzzoSqnK6eXdAXmuIUgzWAje31ORH299BNt1fNJSC3fyIpJlvIkcntQztwA0qxLvQDGu0PigayQgtn9NneFOUE9iw67i2uTGJAh%2F88LZZimaIdbts%2FAUOawAk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9d6cf7956af-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T04:38:20.583528Z","times_seen":14873834,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":6,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matrix-client.matrix.org/_matrix/media/r0/download/matrix.org/MFjDZhRjHsgfJDTiBPyAEjYp","fqdn":"matrix-client.matrix.org","domain":"matrix.org","tld":"org"},"ip":{"addr":"172.67.2.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:10.701Z","timestamp":1719559210701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"matrix.org","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 May 2024 05:08:05 GMT","end":"Thu, 29 Aug 2024 05:08:04 GMT"},"fingerprint":{"sha1":"95:53:E2:B9:11:52:CA:D3:E5:8C:B6:CC:4B:C2:49:BA:AA:23:50:96","sha256":"D6:90:3B:E3:CD:DE:E0:E8:DF:6D:6F:E0:A3:F2:6D:F4:7D:2D:B6:E9:0D:18:90:07:E7:D6:43:6C:4F:44:DD:5A"}}},"request":{"raw":"GET /_matrix/media/r0/download/matrix.org/MFjDZhRjHsgfJDTiBPyAEjYp HTTP/1.1\r\nHost: matrix-client.matrix.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 28 Jun 2024 07:20:10 GMT\r\ncontent-type: application/json\r\nsynapse-trace-id: 7f46985b634c16f5\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Authorization, Date\r\naccess-control-expose-headers: Synapse-Trace-Id, Server\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: sandbox; default-src 'none'; script-src 'none'; plugin-types application/pdf; style-src 'unsafe-inline'; media-src 'self'; object-src 'self';\r\nx-content-security-policy: sandbox;\r\nreferrer-policy: no-referrer\r\ncache-control: no-cache, no-store, must-revalidate\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 89abe9ab28da56bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T04:38:20.583528Z","times_seen":14873834,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":47,"dns":4,"connect":1,"send":0,"wait":46,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"femxpa3.cc/img/icons/favicon.svg","fqdn":"femxpa3.cc","domain":"femxpa3.cc","tld":"cc"},"ip":{"addr":"172.67.195.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:10.962Z","timestamp":1719559210962,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/icons/favicon.svg HTTP/1.1\r\nHost: femxpa3.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://femxpa3.cc/\r\nCookie: cf_clearance=wwrTyYOt7rpP0mMhTm4w5Tk6XpIkmYhw2P3buoU7iPE-1719559200-1.0.1.1-YHqrdfqZE_6XbOxKIF0lsBkOLi3NIU1cfxxkp.ZR3R8foK0kfUUDJsb61OIGNkZ9xrgj7uf5q8xh6plBmOs90A; inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 28 Jun 2024 07:20:11 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: EXPIRED\r\nLast-Modified: Thu, 27 Jun 2024 22:28:56 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TTY9dIyev%2B0zRSt4tT6njdU3SpXNdt5kyc28JtlmnVkaNvbmv54pirRxFd1MauFU%2FzJ5Da%2BofAnWfvGjqexCEqwzPjLUMJqKzsoNVBQO7vPJSVRSILl%2Bca7HZEq4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9ac7824b517-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2707,"size_decoded":2707,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2873), with no line terminators","md5":"55532d854b63af6b41d3794961adaa89","sha1":"55276fb1f2523daaa117aa28267a6cf36fac02a6","sha256":"5f6fd0addc0b3adf191fad3a0542db18f9e9f9a92ef17f6af9625d3683128870","sha512":"55a6ba2664b08a2ffc8355635e1312f190c7b2f1320ee5828a9f9a25bb4c2afadc58ccc4430a486b40f579713102849dbcf5e855763f1dbe34576970fdd7791f","ssdeep":"","tlshash":"e751106b8938e18f2700e93ba826706d4876f85e8d50c89531c9a2fe9cf4ff18563771","first_seen":"2024-08-19T18:57:54.166116Z","last_seen":"2024-08-19T18:58:33.273989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-28","alert":"Sinkholed","trigger":"femxpa3.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"fems76xar.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"fems76xar.cc","domain":"fems76xar.cc","tld":"cc"},"ip":{"addr":"104.21.73.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"http://femxpa3.cc/","date":"2024-06-28T07:20:14.088Z","timestamp":1719559214088,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fems76xar.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Jun 2024 13:10:53 GMT","end":"Tue, 24 Sep 2024 13:10:52 GMT"},"fingerprint":{"sha1":"52:05:C3:AC:C9:55:B2:30:3F:90:8A:74:61:77:BE:EB:2E:E0:B7:61","sha256":"A5:B9:02:3B:23:96:34:4B:C8:20:D0:A0:DB:88:1A:05:C9:01:A7:74:22:00:EB:AB:93:27:B5:25:60:D3:FA:DE"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: fems76xar.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: http://femxpa3.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9673CZyzD28WoZZxKs/epA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 28 Jun 2024 07:20:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Content-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\ncf-chl-out: 6iUwUOaXrWE1SrXbD43N9MxUJ5tJH9gtG1ooujQussDJ+/0svV53OZJuhMX/Tq2JezhP/5wVdkLuGh/9wd9a/mAbVEAJVBwxBhy74mQE4oU=$mvu99+l8uBQ4d2OGzksKeQ==\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Hf7hWwnU7dcLmlbP8aVGVS9QDHZ5bnG98F4E0l2lfahTHmC3H0LA6Nb8cHgbZocnG7q82f1exS58WDemPd7Gnsw%2Bo2qjkAiBvfVPGRMMwxkv%2FPWy2vtqP7XISbp6tj8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 89abe9c02b5456a4-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T04:38:20.583528Z","times_seen":14873834,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":12,"receive":4,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}