{"report_id":"8320ed69-8528-414c-85f2-217614a8ccc4","version":0,"status":"done","tags":[],"date":"2026-07-12T17:15:03Z","url":{"schema":"http","addr":"app-soil.icu","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"172.67.212.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app-soil.icu/","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"title":"Soil XRPL: Earn Secure Real Yield on RLUSD \u0026 XRP | Vaults, SEED Points \u0026 Institutional-Grade Returns","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app-soil.icu","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"172.67.212.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T17:15:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"app-soil.icu","ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-02","domain_rank":0,"first_seen":"2026-07-11T06:17:21.469576Z","last_seen":"2026-07-11T06:17:21.469576Z","alert_count":34,"request_count":17,"received_data":13927952,"sent_data":7746,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app-soil.icu/","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-13T20:35:25.859093Z","times_seen":88546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-13T21:21:12.624625Z","times_seen":1885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8155df3ece2d2aabcb7e9e30becbe1d4","sha1":"a269dbb9d143d0ec595fc51d1041b3c06e41d514","sha256":"b248fbbac87a282c3434736406c4429406a25461f55f359fef0e64004020661d","sha512":"601343455b295c7871db2d928e27567db19874bcb74fa0620553599e7a6c6cf12f4b158b5223e1c0c7ad8e13cd3cda99c699abe59ee7ecafa7397361211d519c","ssdeep":"","tlshash":"ff110cb7795619730cef5ab3628bdbc53336408b2780c0170dacca123fa8e82c07a9d1","size":925,"data":"","first_seen":"2026-06-17T20:11:40.99091Z","last_seen":"2026-07-12T17:15:06.814756Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-13T01:57:32.779317Z","times_seen":3215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app-soil.icu/4aeebc09a7ca7fcd.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:23.001Z","timestamp":1783876463001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /4aeebc09a7ca7fcd.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\netag: W/\"6a45a650-155\"\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8sU7dQWWqM42oFjWvdZoc6K6md07hnRFd2vHGEQJxGTgp9%2FYHeYCqU6M18MY6RsXuWcgXvUpLHu9ogljOXz0%2FQCWC0YnHe%2BnHW51BvQJC6VaMOQ2N2ouur6tPQ5%2FNA%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a1af15cbe75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":869,"mime_type":"text/css","magic":"ASCII text, with very long lines (341), with no line terminators","md5":"d2e5e7276aa8a48bc5f67fbd62de0109","sha1":"e2603d50963e13e99fb8b2cc785883642b0ca6c1","sha256":"01ae72ae207a8b0242b58e8ed33387ea958e4c5d824f710a6f65b9e421555d61","sha512":"e50b6efd66abcb8594bb7a41e8b52d8d8a4be6a5c071ea36ec2e3d366d3d912717fc139f466c9617481961f885755db198c5c3ef1910becf6d2248fbe2fcbd7c","ssdeep":"","tlshash":"e3e068043848f5ec892fd32030636a44c23680c35ab62c0c3ab5b01067bb66012af88a","first_seen":"2026-06-15T16:37:54.657353Z","last_seen":"2026-07-12T17:15:06.797728Z","times_seen":9,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/ab6509ad3f1afe09.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.981Z","timestamp":1783876462981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /ab6509ad3f1afe09.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-45b8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lr8rSwrozf7gTKDNd8WrspAJuuupe7np7JxNK9rGCVkMCtZnDMPCDnqImCgdekv66rfxfOSLCSrDVMj98jJDiPhP%2BGENbEircqlosqk60KGju3XhrSUQu0cWES6te%2B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15abda5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17848,"size_decoded":2334,"mime_type":"text/css","magic":"ASCII text, with very long lines (17848), with no line terminators","md5":"cb6df2321c2dd31b304f4a071a926eff","sha1":"0b48f0ff7a8ceba991c3ed9e69ed01858da01f1b","sha256":"c1067d78201780a0cfebab2a34deac111b320f9641d08f308be0ff356d062e97","sha512":"dbe52ec3a9087928f248ee93fd6519989c43a7c793e1feef952b2665dbae6f7184bcfbfefbfa0888d9df4d865f392a32bd4aaae404fd4c70870f073e397d574a","ssdeep":"192:vx7B9YzxpYlQxAPKY2YmYXtxqYNxJYUxEYvx7YGfx2g8YTqYs:57g9ql6WT/vXHznKu95MGp2g8YTzs","tlshash":"d382df30841ec44ec576fc8235c93f23682d542985d45d27ef2d8aa98edb87773a1fa8","first_seen":"2026-06-15T16:37:54.681623Z","last_seen":"2026-07-12T17:15:06.79849Z","times_seen":9,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/381a725bf2251f50.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.985Z","timestamp":1783876462985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /381a725bf2251f50.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-3d7c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yt6S8nfz2qRQuA6LCRiSfiTN23Lx7zdhTBb14xm%2FFYrN41azUlORj0R7KRAVLMmmRc3gKhBbPYNp%2BCOckXpjJDKSdUeyB034QleLkqVCC0Jy%2BTetXPeAdvbha%2FwQXXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15abde5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15740,"size_decoded":5043,"mime_type":"text/css","magic":"ASCII text, with very long lines (15740), with no line terminators","md5":"284d6978b9121358818bb26ec211b1db","sha1":"f11c6a98214a5a08a3120728bcc4972f96b31200","sha256":"7e578952ce65b3941ba15c17bc9dab371713ec1974d82d3577495c81ccfac16f","sha512":"02d049bf4bf073f0486d34e7cf3d496af61e90db36d88d762a5002f85ff4ecb94594c8b41b3b79e73368f7492762241cc2745c6941201b4a82f4372ea22a588c","ssdeep":"384:e6BfOXyYe3bRjMn7elTEC1f7OLwy3OjALKSY5:e6BcZAy3ol","tlshash":"356264222700aa2cf537d9197d81b1ee62244c179f579bf49da1a42ac5c2b833b737cd","first_seen":"2026-06-15T16:37:54.689592Z","last_seen":"2026-07-12T17:15:06.799904Z","times_seen":9,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/8e904033c5e41cd7.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.995Z","timestamp":1783876462995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /8e904033c5e41cd7.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-33eb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJOwuNQvU12xEz0j9X8TcTRRaxfZneopczrPKG21fM0u69kz4UKP1P5VNY%2BfNrwtmKE7RqzmbF1A0H5LBno0Li6%2B4LBNLJgPx4fv4RoBkgy5%2BeTKrnd%2BTtvR%2Ff61pQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15bbe35694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13291,"size_decoded":3911,"mime_type":"text/css","magic":"ASCII text, with very long lines (13291), with no line terminators","md5":"84aeff3594d033abdba8ccab187411e6","sha1":"9fc5e943eeafd2cff4c0d4abd75e3f23d53462e0","sha256":"1a14a3c72597323aad1546f6f44f56d4745452ee2e53e2548f33b6996832210b","sha512":"6d77fdcbe29ca8cae8764d2002252fe201c42d35821b0d46fdde2c1bd8737dacbd037febf5ea75e6177757c2d2e559c1a451c3c0bc1d7d738c43f5d1d395b6ed","ssdeep":"96:RWaKBHAnJNQMiyQmTLnjFkM3t5jmXWxWiGOosdyJxgHWHI2ZANA9lJcJcJCJaVRn:RZacN5tnLjMhJ5GIaaYEwW","tlshash":"e352650b652be0d8f46bbc2778c82b5e6190c5a4e137b59bc872570f86c71e3279b346","first_seen":"2026-06-15T16:37:54.672025Z","last_seen":"2026-07-12T17:15:06.801313Z","times_seen":9,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/415db8a455bac06b.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.998Z","timestamp":1783876462998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /415db8a455bac06b.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-b91c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWogZFynEPNd%2FNHNk5dG1Hvr50o6jWJJ4tDHw1atT50m3UJjtKLpIGyI7WvsGB1iq6XYKr%2Fr4vWdfeP6O25I77kVS4Csh31XokOHo8ctr8h0eEUmgAChpLM2X0SzOsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15bbe55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47388,"size_decoded":11107,"mime_type":"text/css","magic":"ASCII text, with very long lines (47388), with no line terminators","md5":"810db806a45b73930897224cd4a45c08","sha1":"982669fb2798f3b0182a8b43a17b02213801bda5","sha256":"632af06918901b3d7f7f4979c77852f41f6f37e41e5e81b1e4ba2035dc99250e","sha512":"b5ebbafd0a065151ba5a0322b2bd633a0fd934d7dc43591a9b8e3f2e44195d9a3ecf72fcc77d9c57ddeaeb1beac63fe71b1e73599fe2dceb0510f55b5767bcba","ssdeep":"384:wbbgM1P81MqiBUa1vgO/zG4thnn8KV+sts3lrEGgFj:K8W9BU0HZ/Z1tklrEGgl","tlshash":"6a235592bf10b738f02b04265992b16d23366842d79e5ef5da326405cadffd21723b8d","first_seen":"2026-06-15T16:37:54.685817Z","last_seen":"2026-07-12T17:15:06.801975Z","times_seen":9,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/f3939915a937b6bb.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.984Z","timestamp":1783876462984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /f3939915a937b6bb.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-cdff\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPPaQCgVh0DKw0EXHIrWMixhN9cmyvnFwpPUfNI6u4P17KJ%2F3O8rsG0EvXqmSJVGV2ciT%2FSjeo8iVwx3OzQ2Tsz9wZWQFeOrQ7t4vdYC9qJKnGDEgKVP1OmLTrEhv54%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15abdd5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52735,"size_decoded":12723,"mime_type":"text/css","magic":"ASCII text, with very long lines (52735), with no line terminators","md5":"6d60be17182342f53b2faee11ed698c5","sha1":"175944f774bd3aa4388e2c61f714b84a050c6c28","sha256":"724916063760acf118a927df8fda2b610ce3f57d3ab82af75297b3522a775443","sha512":"928c01de500b020534134d9e3a61f15ba83a2a739de3b7ecea3d4161766f0c1a5003a11e43fd868eb14da32d02b0b1de5a7317c7872588cd53365d6ef5433a62","ssdeep":"768:WSJnlh/05vC0l19bwMjjFILfKaNHhhLuxpo40/5g+NDbX7Ve2oZl06:W0Wl9IzJNHhZuxpo4s5gF","tlshash":"2a33876125c6f03df47be55a7a94a78920288582933e9ea5d572f23ec8c31d21f3778c","first_seen":"2026-06-15T16:37:54.676399Z","last_seen":"2026-07-12T17:15:06.802609Z","times_seen":9,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/36c586592095379b.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.987Z","timestamp":1783876462987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /36c586592095379b.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-145f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRM8o2YJJdTkl%2BmCDowwuDFvqKJD359f8X3lmNCnnH6E7aaRXBojVGGk1ZFxGWkMTgsp%2FyKX1DPWMo215db0bn6E2EpWdLPKoWCutxaPb8HN5KcPdhoVai3Wvo7wOfs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15abdf5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5215,"size_decoded":1409,"mime_type":"text/css","magic":"ASCII text, with very long lines (5215), with no line terminators","md5":"132a9327ae48f2d229e83cfda2f62460","sha1":"78a1495361d05c81f0a6bc1ce9f1a63ed9b8ed0e","sha256":"fdc4d11e85ea20e9f79b40167836d560dab92bd18dcc24d8a72d27c906c32e2b","sha512":"80cd2f6ac0a356647f9ee5f8601efb244f8e12a30f501f2e08267b10a4baa7b8aea28082c046a76c7e9be18c3e314aa20104bf6d648a7ec26db4152a125aadd9","ssdeep":"96:+/gMe/gMd/gG/gA/gG/g6/gc/ga/gMe/gMc/gi/g1/gi/g3/gs/gvgRXgRtg8gf2:yg3gSgKgQgKg2gkgWg3gngugJgugvgUQ","tlshash":"94b16a26930eb716832a0c827bdf3f16ac96742d39454536ee1d09d58cf74a34252fea","first_seen":"2026-06-15T16:37:54.677456Z","last_seen":"2026-07-12T17:15:06.803917Z","times_seen":9,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/73a3f260470660d6.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:23.000Z","timestamp":1783876463000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /73a3f260470660d6.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-340c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Rsa3xT9hPd9uNX%2FKDgxCqutV4LlBHzeuYWSelfGLMmZ3gVk0yd8%2B0%2FlRlPJH0fMK5mMmyEltjGSrFafnd5kin7wQqPxMLs46Id7rbfLfvKrBZc8ZEB4vtA37shy8WE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15cbe65694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13324,"size_decoded":5065,"mime_type":"text/css","magic":"ASCII text, with very long lines (13324), with no line terminators","md5":"12f8038ab77fba02eac53de93ed9a988","sha1":"8f0b0e36f88d7ed62d5dd87d2e818acd610d8c3c","sha256":"817f4e0a7a32b73eba60b75924e8b9a033c1ea6293b051d9b388e8d0c3db68e5","sha512":"b20547ebda40ddde5586d956fbaa5a7f71f0aa5634f5ceec7ecf10c597ee8f827c6f6e2a1b4977b4f6ad4896326f918f09aa59676a31839fbb70557ba968c593","ssdeep":"192:5mUJbiKneTJTLdKSme+je0ooRr3n5unU2GZHcZ5Dfufs:kUbeTJndKW+SdSr3nt2WoRWfs","tlshash":"a452fee85310282753134f3607b59bb4ed74488207d3ce6e91c0ad98c6facb9236f6b9","first_seen":"2026-06-15T16:37:54.694067Z","last_seen":"2026-07-12T17:15:06.804563Z","times_seen":9,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/829a3770715bf35f.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.982Z","timestamp":1783876462982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /829a3770715bf35f.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-18814\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGQYDUFPO02pb1V0TFMyOdw74GKFI98qOkw4UarUS6BcM23koYBDdfxX4VNNftImyWZlrvwul0pPWl1AD17WmGoATDCta98lGMrlUFRSzUoOs8%2BLmmbtED%2FmUv4NHrQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15abdc5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100372,"size_decoded":21965,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"63046e2314f211ef2ec0e2aa9de0b950","sha1":"2b8d5115722e7b56e432165435d541e1d22b08a2","sha256":"5ec786855929cbb3754d730451569ef7f721d555d350cbd71851edd7f80d9fd5","sha512":"617fb5fa59f42052005e2c9453333770b14c928bdb26fe8b4dbd90b66cce441af632a5523e4b6d2f53f75ebde86ce244196dd8972348e1498232e0c7994ef5d1","ssdeep":"768:EJH1Q5AN0ke9jP+deNIKpNDXCL2qiIIJN6I3jHI3jsI3NIucBIuc9uIgvsE29iH1:Eip5P+de+KpNHqiIBzZJJIlQR4PnjLv","tlshash":"12a3c7223691f63cf53b4429a595269d62398442b37f6ef9c9302a3d8ad73e3067364c","first_seen":"2026-06-15T16:37:54.691632Z","last_seen":"2026-07-12T17:15:06.806088Z","times_seen":9,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/d5f552500a39d426.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.988Z","timestamp":1783876462988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /d5f552500a39d426.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-1cc7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bd1Xva4vUgQCSvcJQN3bSN7bWz6xHLqAAFqOBPl1HRdCsOQWopTlCcprTKCxuA%2BjPM%2Bq%2B5tHc8ytqMuqvBRRuhsiyyC3jtc7l0AUCeTYCivWFLg8W3kujWGJi1lYj7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15abe05694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7367,"size_decoded":2642,"mime_type":"text/css","magic":"ASCII text, with very long lines (7367), with no line terminators","md5":"fe285a8bad1a5acc6267733e8f3efa05","sha1":"559ec6c67d0a89779b7aea586283bab0545893c3","sha256":"1607fdf99118e42dd5dfbea58792e1f520b959325b5cdd62bc4903d401664dce","sha512":"6eda142206cafe0d828f7ca0f4d1b34f5808819358107c566d4a6d733f6c008693e5216083b5a51e469b7c31469bab1195f87c66af1bbe65aeaf44d129d9e123","ssdeep":"96:YwuaN/gO3XqxLrX77Ul2+BUQBZXvCo3159XL/5BAvN:YwutO3XSLv7Ul2+BUQBZXZ3b9X75CF","tlshash":"3be133222319a168f03bd80d7d647a9a304ad8078a2b07b9db56d23ec9c79e317357cc","first_seen":"2026-06-15T16:37:54.678453Z","last_seen":"2026-07-12T17:15:06.806652Z","times_seen":9,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/6c0be584033332cc.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.990Z","timestamp":1783876462990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /6c0be584033332cc.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-1467\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1xJCqA0LFnFgx38%2BaSo0XgnFjihxDAACaX%2Fx5XK76aBNrsxx99jh1EhZHnvO7Ny7ojRBVadM1T4xGFZfenNz2x2OtrXNScO6%2FJgVv236W6%2FqJO%2Fz5L3qcRXzc55ES4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15bbe15694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5223,"size_decoded":1895,"mime_type":"text/css","magic":"ASCII text, with very long lines (5223), with no line terminators","md5":"9609e17ac714170552115ae68e49e773","sha1":"53b8a54a27233a25d0a9e882bb6f4ffd629852fb","sha256":"5851628cb8db64cc5c305e6c3e1a6d3a223532e181b59d772df39565507cec44","sha512":"05ae8c8ba30b87965fda0ab97882ebe981afcee093ea3205e2a8a0d4fbd9706513b478d6c7043fca638ff99c5527a75bed3846747b4679175c17da8ed8f3c0f6","ssdeep":"48:zyq+P6eSrL2HJtlIX4KyjY0P8IcVhqQ8scq17oeI7Syl5j27+qKcVpD:zypPVl5iIJsrI+yrm79","tlshash":"a5b1ce072d12b16cb23f8855395e313f201048470a9ea5b1deb24e2c9cdfca32f5a75b","first_seen":"2026-06-15T16:37:54.679761Z","last_seen":"2026-07-12T17:15:06.807289Z","times_seen":9,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/1a50351d3a5cf2bb.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.991Z","timestamp":1783876462991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /1a50351d3a5cf2bb.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-11f1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fe8sBqbNM1lcJZTK12mFHBBbdMF0JOShQjmmO%2FTb4M1Ztb89q4LKMrjBUl%2FB11y9uwckiN6cLLU43oIuXdcm252%2FNZoYzpBD8FTI6xRbHqpOBeLjlPkFFR9F1Rl%2Bgr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15bbe25694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4593,"size_decoded":2240,"mime_type":"text/css","magic":"ASCII text, with very long lines (4593), with no line terminators","md5":"042af3e4ae757e1188795a9dd57d7d2c","sha1":"8f02ab58eee7744e3efa99ed4a4d663bf6baade5","sha256":"d25dbf9c7c2397dbd2a8bf48b0fc2e78985169a2c30baaba3dc2ae6787665a90","sha512":"ed8b9989ac90d66965fc32604e5ab68bbcc3d4efd293cb027c54c549570d576cf35207e43eb47312fafab4eceb129a45788d39923e8794b1835e676dcabe682a","ssdeep":"48:y4zH5W+w64mmRV+lMpHgYeljdut9PLsURcAvm9iTu11QW+AcYPY2kfdjZhE39sby:5HqV5RnJelhunPYURcArWRzAdFhENUy","tlshash":"d69142329ac832eeb1fbed50f4d0a579641e4103964b8e7c99b1542ee4cb2a341f235c","first_seen":"2026-06-15T16:37:54.683444Z","last_seen":"2026-07-12T17:15:06.808469Z","times_seen":9,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/peak-module-v2.0.min.js","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:23.002Z","timestamp":1783876463002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /peak-module-v2.0.min.js HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-3007af\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtBGqHyVrPoP1eC4mEbEvlecdqovnB4Ft%2BnThaP8gAeRZwJkti9DUz%2FL6Pr00j84gSlznsIvgQySV9CMFFsmYL8UOoFlF9z92kK4N0NnHrpcXPL7HY8I1TlxHeC8Bl8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15cbe85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3147695,"size_decoded":923524,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d007b391849c852bf1f6cdc2072fad26","sha1":"7aed666fdd75b80298ef2264dc4b29da39d5cbe6","sha256":"5b472e5c502bb1bc852ee9f33aaabf2a2773ae0ee871cda044d0d03365f8e3b4","sha512":"ecba3993a48a7f653a4b66abc34db8c3dc74e675b634f5bce1dcb503439544c182b1eae5c30e71ae162a9efa0f20bff50bebbd4fd36d9fec716f4d10d357181a","ssdeep":"24576:FftuhGR99JJd9hVnjVqAHtnel0wUvnLjfHjbrm2q0wqiYQC+893wcIHQjtrnlmqZ:4zBjEJNFUaUlqqW9Oa","tlshash":"22258413a2d038d645d75fb1b62350dafc2d4bafb58c9afa998cf830bce1054e598634","first_seen":"2026-06-15T16:37:54.695177Z","last_seen":"2026-07-12T17:15:06.809691Z","times_seen":13,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:14:22.538Z","timestamp":1783876462538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s32FLFjlhTtRE1Nf5uDU3cbGa636F1bTKc7UayavaDjc%2Fnl0rn9VXPYZgy%2FBRPQ9P5QVGRPiu2q8VZvBijcKKXzb%2BhRlZ509uQ99ndqP7%2BZghWc9gImLH5ioxyHZ4t4%3D\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a1af139bab5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59959,"size_decoded":22189,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14902)","md5":"7bd7d382e737847f72b49f2e9a3972e0","sha1":"495cc6d99102e0e7d82d266f9f277d5bae1c1318","sha256":"1e71e406b20825fe01da753ac156e7771b9cc828b4633482c4e7c46c819d52c5","sha512":"dd768d9737db21b8fad3c8a09453910119b9e168886e564d7397a2b49f5cdd395b35ae14c8bfeccae4b8a61247e598a1a4b89e62c426791218649445a6884471","ssdeep":"768:0QXxoH9rFJYtoy/LiAFPr265yzMpnRfkJ8+ghUFy9vzoCx:Du/sJ/OARr50zMp1y8+gqFwvzoCx","tlshash":"a8434b50e3401a357c17aff586ccf54cd42680c25adb1adcbede090a97c2fed4ab6689","first_seen":"2026-07-11T06:17:25.454237Z","last_seen":"2026-07-12T17:15:06.810394Z","times_seen":2,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":98,"connect":15,"send":0,"wait":145,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/25ad06ff8dc149bd.css","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:22.997Z","timestamp":1783876462997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /25ad06ff8dc149bd.css HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-ed8f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ZvUwalGzYoWJHVtZJRWmu3rNKHk6uF2Utfg%2BFDyoxbl%2By1JNCEpfa6XUGjXrDjHFrmWqr1uHueGhI4OOv9QkfnQ8ZgENiQ9ar%2FD7XxKbd6Xy2Q2bt2aDl3gbTwTlSE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15bbe45694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60815,"size_decoded":6544,"mime_type":"text/css","magic":"ASCII text, with very long lines (60815), with no line terminators","md5":"e9915828e25c3f8936d870b45671739c","sha1":"1faccacd4a438bf3248c7eacbee3e32d2b190cca","sha256":"88284e2173810a2436e0f83853a1710b67429f28776742417670c0267f07a781","sha512":"30d912aad3c69a14ab2800fddb26f1aeac726204c22e24c858735fcb2e59a0c13d9f6ac03caab6341f8859d7c8ea4ae52b2061a951a40112902b6869ff926795","ssdeep":"192:W1K2gJGtpueV+gBby6weBlwKhno6y9YI1g8aaYEO2:WBpue537wKxy9YI7aaYEO2","tlshash":"4453a6ab73403bb59a2fea51e00b8f1c0938e4854608a275507af017d9af1d3a767d7f","first_seen":"2026-06-15T16:37:54.684837Z","last_seen":"2026-07-12T17:15:06.811374Z","times_seen":9,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/silentfilter-prime.js","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:23.003Z","timestamp":1783876463003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /silentfilter-prime.js HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a45a650-91dcf9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJYSwH5XTmg1L8DkDoNwgKmhiHG89%2FbHcXemrx53Xq%2Bz%2FBsHYXvo4fi8rAUmNAW143tJyqKnG9nFL6gX22IukDQbFpbJnAX6mzj2bqmUz1%2B8oD6MRKQLp64HYlhyzxI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15cbe95694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9559289,"size_decoded":3333287,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"95ca20fc08b09383f7c6b8346161bd68","sha1":"220822bb2be00167678d4a2189aa8ea11f3ae1b2","sha256":"8b4ee48955865ca79dcf32370cf266b5e5c2d44bd302ac162742cbac0d502210","sha512":"aff579b815ca8584710ec250e9a3ff564d9ee5a7b5ba5d5d18dd77267b6d437517c70d591887832c00deb9db8024383566f80c79801e621abb67757cf8bc5782","ssdeep":"12288:eh/kr+ET5AEv+1GadAuP3J1B3USKz6ba0S/gzN4Ww5Z6O68UyKhHkmVbA1RcU1:ikCETR+1GsAWbNUSKz6bJzpWbv","tlshash":"29356be77361b062835a50a548372049f339e8585c4d442cf668ecff7ea9d84a6bbf31","first_seen":"2026-06-15T16:37:54.658944Z","last_seen":"2026-07-12T17:15:06.812564Z","times_seen":9,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-soil.icu/Y8bMVF1qei.js","fqdn":"app-soil.icu","domain":"app-soil.icu","tld":"icu"},"ip":{"addr":"104.21.61.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-soil.icu/","date":"2026-07-12T17:14:23.006Z","timestamp":1783876463006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-soil.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:37:53 GMT","end":"Wed, 30 Sep 2026 17:36:16 GMT"},"fingerprint":{"sha1":"13:44:8A:BE:2A:FD:90:DA:EC:2C:3E:D2:FA:43:E2:A8:99:B0:E4:EE","sha256":"F4:39:6E:16:2D:AE:82:E5:A4:2F:DF:B0:11:33:CB:ED:A9:7E:79:B5:E6:FA:DA:81:43:62:CF:37:4E:F0:C6:D0"}}},"request":{"raw":"GET /Y8bMVF1qei.js HTTP/1.1\r\nHost: app-soil.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app-soil.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 17:14:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 01 Jul 2026 23:44:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a45a650-c486e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QUgoPmiNtF7CkzRA%2BtOzha7%2F8DExVolBhNPFPMjw6TAfcOaEofLJUNVWKvQkLI8J5YjI47V1F2owa1QXyp1OxjyN7uXiKGJDaWazlrnivXSLDDXDOhEnlal4UJKMMjQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a1af15cbea5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804974,"size_decoded":209623,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-12T23:01:26.842811Z","times_seen":31,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"app-soil.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}