{"report_id":"8346c983-5374-4a26-b84a-58249396234f","version":0,"status":"done","tags":[],"date":"2026-06-18T16:05:56Z","url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"172.67.158.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"title":"Flare: The blockchain for data","dom":{"size":288418,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5915)","md5":"beb623d0e3f1a1bcf61342fbd9dd26b7","sha1":"ae8ca13fc67ce3a31a6b3a858b52159426b9a56f","sha256":"61070609911275dbb9903dc1344cc0fe384e4d1d5d1ee84884412eae75754072","sha512":"950fcc20f354389af16fbb6125853c8f4d87ad18bf4b912784718785b0979e172f51c5448fe6452386056f75eb37cc5f634d740b12183a975d3e9563f662d537","ssdeep":"1536:FKEnhvo5sauKuW63oo9DiG3nCF1EZV663+DiG6CaxCIPvEqvjhgxJn2RGa4bL5jt:Fhvo5sfoyvNjaT2ZbI","tlshash":"4a54c9b2f2f112a7000a93d9f7765516efd060ebd5468ec8729c0be89f46c9d68d324e","dom_hash":"domhashb9bc7121eb2924810271c67be3bbc0f2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"172.67.158.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T16:05:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dns.google","ip":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-04-16","domain_rank":158,"first_seen":"2018-10-26T18:11:46Z","last_seen":"2026-06-13T01:55:12.131589Z","alert_count":0,"request_count":1,"received_data":772,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flare.network","ip":{"addr":"104.18.2.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-08","domain_rank":94851,"first_seen":"2025-06-17T09:05:49.543788Z","last_seen":"2026-06-18T15:55:51.423897Z","alert_count":0,"request_count":1,"received_data":2514,"sent_data":607,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"phase2flare.com","ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":129,"request_count":43,"received_data":4859124,"sent_data":45020,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-14T23:32:43.59512Z","alert_count":0,"request_count":7,"received_data":787209,"sent_data":5388,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/30347150-5a6f-4ef3-8bab-61e462f0a1ef","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-18T19:24:11.184349Z","times_seen":2353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f3d756430936976a1bd0f30f352032fc","sha1":"0973285faf79e62e2ab2bc9fda54838cb0f3cc15","sha256":"088c9ec74d686075d06590a709f1c73e34e845b70bd2a1fa68eb5d1820f3277f","sha512":"5da7510a0e8f6f1967ce7f60f3885b910b3e2ff7a73083414cce692114cbed81942ceb0e48ff0843ef58f37a0d3cfc178b2d31caacfe0fba215c010506a844a7","ssdeep":"3:N/BKL1X/RbTQn:eL1PRbcn","tlshash":"a55504c0544574751710d410d55014557145070310150401f05d04f517300c000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.822364Z","last_seen":"2026-06-18T16:06:25.822364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db8776f84db1b8","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f907e01e2e23e01c417a35bd57059044","sha1":"836733220a6c82eee3db3d32133e09aa49a9211b","sha256":"492f481de4f121e1e5d663089b27ef44638af144ac6faf1ee16f83f751606eb3","sha512":"f70ae42b2588c3000241faeda64af0efc8c5db022b0c1e848ecea8f7adc035cc720d617cf9d009821edc8333f1b08506ce1b0dc911c97d8bca1d06e84d5f550a","ssdeep":"3072:r1vayw9AU4KFLoADsDGdZZYr3lTIzuV2R2CBYKmSJArWrUvad:r1vayw2U4KFsADsDGdZClczE8UWrUyd","tlshash":"5b14f7cd3bc570471292ab7501a77ad9b23b5c80013b682ce441a1d4fcb2b99f5afadd","size":191019,"data":"","first_seen":"2026-06-18T16:06:25.804959Z","last_seen":"2026-06-18T16:06:25.804959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c096b25c99b70fb77e2242c1bfd996d","sha1":"7f33dcc130bddb19063152fe7f256f3afa0da5b8","sha256":"a7e6ba33ddadddb8fbaf3222666542da11ceef6554a7f696396520a38bb95a59","sha512":"8e25e135b0f001f36e279a0aae8f74dedf31a29bb6c59357775efda36078a17d428d4e8e2e81b926be64c4135130369fe4f7a9bdb5ef8cd98242c095e8667338","ssdeep":"","tlshash":"2dc02b883bc4e024c64131351c6f42c6f638df600c582013e042414db6b0b50039ff4f","size":137,"data":"","first_seen":"2026-06-16T09:40:41.561727Z","last_seen":"2026-06-18T19:24:11.15912Z","times_seen":2434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"eed6a63b605515e82147be23a3263049","sha1":"59eca93199a5f313505e2611ea04a770c126e4b8","sha256":"dd0fe9acc4aa39c0a59e378bbb0f52a12624b7a4a0ce2c49360343993cf8c99c","sha512":"e3a6070d3feab49e6ccef8ca3ffc206362b053f1fbd3578986a4d1a0ab08b8df0ca19eaf24fc3e68c2af9f5353e41ce24c9a8154ad09a501ead7422c17850f31","ssdeep":"3:N/BKL1X/RZBS:eL1PRZk","tlshash":"be5504c054447c741511dc14d35014155305050310150407f05d0dd41f3004000d05c1","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.82399Z","last_seen":"2026-06-18T16:06:25.82399Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-06-18T19:24:11.167548Z","times_seen":49118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"208f95dec223c297f961f8483dd66d2b","sha1":"7999db60b5d063e250af9886ccccf2d622a7c2b7","sha256":"67f12dcb7e82dba22000745a50db8576274d10a6255368ec9a95561cdc840335","sha512":"ebf1295f90c5c1d7f4f9c9ab57fef303e654bdb72944ac93ce96b6d00c54fd6b7ff4137212d4d8f29c5f26dd1c66e89552d5a31a8a6649300146f73d59513a9b","ssdeep":"3:N/BKL1X/RbMR:eL1PRbMR","tlshash":"8b5504c0d44474741710d411d15114155145050310150401f05f04f5177004001d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.825773Z","last_seen":"2026-06-18T16:06:25.825773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9308f414d7dd9882cb85e15722a9a43","sha1":"45f0ab6015a6cd1f21b7af815cba467e6d2672e2","sha256":"2c3b947ab6ee200b1bfbefa909136b0ec01184ac5268f0e44b69ac4803e66949","sha512":"5b9535335115dccae9a5c54be0e11c1d378608d2f79578d225f36eb6b5c718cd9527a2d3094375438155438757759d84ddc366c52db95acf8ab40ac259cc9586","ssdeep":"3:N/BKL1X/RcQcd:eL1PRhs","tlshash":"435504c0544cf4741511d410d15d14155105050310150401f05d04d417300c000d05c1","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.826954Z","last_seen":"2026-06-18T16:06:25.826954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/?__cf_chl_rt_tk=Gzk3vQZSKT6u.kRXtXW4LMbSlZ1Ew6_UaLioH_w1zyw-1781798659-1.0.1.1-OdrP9wUxTIVtSQ__xkXzjZaKxCiw2NIGWjywCmeV3Jw","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7bf8a1e752d4a98cb4fdf88e465cae44","sha1":"ad0a8ebcbfa59fa524e1055d6521041b73b3db99","sha256":"0b1bfb0fd234c9ef032caa9ba624c54122cfda86a6aa2c2918984658362133f9","sha512":"0af5d171bd2c88047018e1ae75976a1beed6620edef799ba6371ed5649d1edbf15b128f9729fd3b6a450bad9edc2c9d2610ac5ddb40f970c6aaac83a4abd1f86","ssdeep":"3072:Q7TIVWqGA9BPqyRBhq4KVsuzQ0FmYrIAPQ3AKVbxKxzGEx:GT+Pqyrhq4KVsuzQ0YYrPPQfbxKxzGEx","tlshash":"b6241bce35ca705363956bb00077b9dbf27a5c942029182cd381aee0fcb67597297b9c","size":211658,"data":"","first_seen":"2026-06-18T16:06:25.827899Z","last_seen":"2026-06-18T16:06:25.827899Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fae0ba0c2468838d7cb48f633f7b2db9","sha1":"48bbc8bd3259c008016d4d3d2b34f198fa2c9a61","sha256":"7f5c9b6b607ddf3d173fd58fce4f8a05511ad1d2892388abd6a05f544ab6acea","sha512":"28955d23d3e71c9a2bf264f1a2c2021972486c25b08cef21ccb10e80dfc04fd64605682840b4f690d9f246eb3c069ccdd6907e68d5c184ab910cd07dde5c7ec3","ssdeep":"3:N/BKL1X/RYVSU:eL1PRfU","tlshash":"055504c0544474741d10d410d17014555307050310550401f05d04d4573414100d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.829039Z","last_seen":"2026-06-18T16:06:25.829039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/assets/framebundle-grid.js","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b98d29e2dc4b3406e48e10322fbe880b","sha1":"8a21df07399f415b241625f36388c094c6bafb4d","sha256":"e44df1c892d383a509e30acbde628c4d7a2cfc44ef407d6714ac601b1087a564","sha512":"f4d98e6509fb04ca069c0667833c55a2c78ce59911ef40cf1ace5d80a3a841ade4922af9adfaebcffece62e3fc601c1039fa8b1ba584c36c21495a4e7723cd9d","ssdeep":"6144:KnojRHkzQRByRCSsmDquooQm4uVfgxlK7ioXGhCVjdEhp+xwnWWhDOksozZ:KnsRHXRMYw1JlAU/EbtsozZ","tlshash":"32b4f97d8c207956592de011b502be0f2478796caa61f9b7373063b792bf8c79be4c81","size":520506,"data":"","first_seen":"2026-06-08T14:46:54.916871Z","last_seen":"2026-06-18T16:06:25.800532Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c4465bf17dcc11d935a77884e15f380","sha1":"7760fb989098c3a42dac1c69b652c115de97b301","sha256":"3e6da1a7bcf5e99eeb2ac919f08c9a079683ae7e9bb02fab272dfb42cd0039ca","sha512":"e4b5246ba25d7dbc9b17684fc50bcb5b503ca7a622974b0eb8cd3badd09c359ef562856738e3970887d48f63e6ff81e8bef3af8fd9dcf2e749917b7e8465b6bc","ssdeep":"6144:S/47hDMHeTU5JVDJUQ4W0cDRqL74VQOlqRC7JW5l6fmPUe530+wovZ:S/6hDbot7JnMmWtlwovZ","tlshash":"e0b4e97d8d207956492de011b502bf0f2478796caa61f99b773023b792bf8c79be4c81","size":515167,"data":"","first_seen":"2026-06-08T14:46:54.937214Z","last_seen":"2026-06-18T16:06:25.830069Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-06-18T19:24:11.195715Z","times_seen":49173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"39ad62f1d9dee6769a08d9531db0e7f5","sha1":"1066465d3762bf0bfd6384818008ba09e944788a","sha256":"e55383342c213022649ee5529ab7a2abc955d6c9535b15755c049e085ec16089","sha512":"c16aa682942873a6f3d6678d759eb716d0a424c5a759b6177f898b7362088051dc8d4c5f27033527c5ec8fca0090e669a67c2778f91e11cc7a6dccc737739ef4","ssdeep":"3:N/BKL1X/RYSw:eL1PR/w","tlshash":"365504c0544474741510d410d1501455d105150330550401f07d44d4173004000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.833188Z","last_seen":"2026-06-18T16:06:25.833188Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad7932710ce6bd3f10fa9d734faf8fc8","sha1":"304d7179005385875e3381a0d319df52ad26f374","sha256":"bd79891da58f475593939f9f6286babb88948adc4829e806169e57bc293fd4f5","sha512":"72111de9a604f021ca2d80879dcead59b08506a8e1ea6bdef61bf0aa9d1364581b76d6921a7fa7db5fa7ab3fe5c01974d2ee5e1d92d5dd8f0a41e240bf303be4","ssdeep":"3:N/BKL1X/RYUAn:eL1PR5A","tlshash":"095504d0544474741510d450d150145d5105050314150401f05d0cd4173004000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.83434Z","last_seen":"2026-06-18T16:06:25.83434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"44800242bb8053e6ef99f676ea7db8f3","sha1":"7d95207a20588bc4d1515b0dccce742f28dba083","sha256":"99f4e7021a20924d4ad5edae0ada0ce4d8066f83a109ad07f26e294a21b6739b","sha512":"0bd844ab3ff8e340a0e764e2309166447622e3434b45a81b5735ea62a1018530262da509ace57423d07c2f1aa820670910691113cc8feadba0d0cea134760449","ssdeep":"3:N/BKL1X/RYTXc:eL1PRB","tlshash":"f45504c4544474741511d510d150545551050d0314150401f05d0cd4177004000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.835535Z","last_seen":"2026-06-18T16:06:25.835535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a93dc2e6346434687d9d351d07ed36ff","sha1":"227a6c617c41449e6a4873a5661e1832473eb823","sha256":"734903ab1d042bd6e56471167cd37d01cb4b60eab679c267d2a5c88db2454168","sha512":"2cd88ed4c5c0acf14d9bfba3057317ee9b6e0a3368e89f73aab52c5a7eb9f35a2556ea263ccd901a8fa0072fd4a6c7c631fbb44836fc51a812e7e0eb89a7963d","ssdeep":"3:N/BKL1X/RbP:eL1PRbP","tlshash":"335504c0544474741710d410d1505415d117150330150401f07d04f5173004040d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.83656Z","last_seen":"2026-06-18T16:06:25.83656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e3b7b7d78ea77c4bb7f8042493187872","sha1":"ca192fcd8d426bd16c1025a23299ca879d8c3cd8","sha256":"16b4e16bd7e69cdbd51a0c7b683671a6a06ee68623921bab67613f8f602a9bfe","sha512":"0eb8371b1bee2621e5879ba5bf4070fca00fb541f4821d5811d6e5e9a570cec21de3f2f4a75a120c41681e6dc0179ac14eeb59db754c107442b3cd07bcb95254","ssdeep":"3:N/BKL1X/RcRR:eL1PR+","tlshash":"585504c0554474741550d410d15d14155107470310150405f05d04d4173004400d05c1","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.837942Z","last_seen":"2026-06-18T16:06:25.837942Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-06-18T19:24:11.16814Z","times_seen":48815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2855ff58da4b5f71f0b703860b44a924","sha1":"95bda72e0031425719c4b89be97778951e378277","sha256":"efe4bdf0dd6ac49eb550dde047335f7342cafd1aa791f1d456fba421af7a8a54","sha512":"512cc78003b3f461247343dce26bbcd44135d1a42699905ee4d1151ee6644cc1531602df2dbe3b0870108a3979c293084ff932ab3abafd03bb0ccb4955e852d3","ssdeep":"3:N/BKL1X/RadS:eL1PRz","tlshash":"a25504c054447c743510d450d3501c157105050310150401f05d14d5173004040d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.839379Z","last_seen":"2026-06-18T16:06:25.839379Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"03fcc2f644c50007016ea49a3d43d62f","sha1":"3aebf444908c14ca18262b0270e514aaa8587846","sha256":"3a9035dd58dc77bfaeeb6d5a80fa4bb2b898c45fcb8e2a69e7c0e83ad934fd21","sha512":"b50a10bf796e24a5da1ac85323e2f12812974bbd2dc56b7e65b9a47f40318a59b70488c307c19da84b45950e9e6a2220199d9e559ef12cb32bebaee48ddb0de0","ssdeep":"3:N/BKL1X/Rdf:eL1PRdf","tlshash":"075504d15444757c1d10d411d150141dd105050310150401f05f0dd4173004000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.840977Z","last_seen":"2026-06-18T16:06:25.840977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c8fd14f1f5d53f66038c568a19d5dc1","sha1":"e947fb865149ea4d4ca2fa94d1d5c1af28f9bbd8","sha256":"046faac5d1f6c60775499121c05e26c8e269979af3a523ddfd6aff5a5948ac40","sha512":"8b25dee6c11f400e1f015edc2b7ecdadb1ece3b6d22fe68717f97e5bfaa8e9479e3703e58b105e20e24683802d2bab51c587dcb9e28b203d7f22d6d98cb7f3c7","ssdeep":"3:N/BKL1X/Rd2n:eL1PRd2n","tlshash":"2a5504c1554474741510d414d3511415710d450310150401f05d04d4173005000d15c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.842272Z","last_seen":"2026-06-18T16:06:25.842272Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c7335118a70143e71912299c0ca0e46f","sha1":"482800239e9aee61eb6c3e5bbe35d962d3d4862e","sha256":"29cdb42a5d927b51496642f714f0da15651791ab91a256036cf1dc8831a20898","sha512":"ec1875317ee10e362cd643a517c60a94a2e0f460653585c316954b30eae0edb6b7b690ccf9ce20ffb8e5bfdbb2cc6862c65cb99caa0bb5aa67a720f19070cec3","ssdeep":"3:N/BKL1X/RZY:eL1PRZY","tlshash":"175504c0544474f41510d410d3501415510d070310550403f05d0dd41f7004000d05c5","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.843517Z","last_seen":"2026-06-18T16:06:25.843517Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c096b25c99b70fb77e2242c1bfd996d","sha1":"7f33dcc130bddb19063152fe7f256f3afa0da5b8","sha256":"a7e6ba33ddadddb8fbaf3222666542da11ceef6554a7f696396520a38bb95a59","sha512":"8e25e135b0f001f36e279a0aae8f74dedf31a29bb6c59357775efda36078a17d428d4e8e2e81b926be64c4135130369fe4f7a9bdb5ef8cd98242c095e8667338","ssdeep":"","tlshash":"2dc02b883bc4e024c64131351c6f42c6f638df600c582013e042414db6b0b50039ff4f","size":137,"data":"","first_seen":"2026-06-16T09:40:41.561727Z","last_seen":"2026-06-18T19:24:11.15912Z","times_seen":2434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/a0a4bce2-2524-4d97-8240-db7d2f27a506","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-18T19:24:11.184349Z","times_seen":2353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"2b4ee9e7ed48858438f8c3f9b031e2cc","sha1":"6fa8ffc4440d1596814aa4c63ff6f8e951418c13","sha256":"2432afb7fec7518e260b64f489d6a7fa294df67459bf9122612bdd76813dc90d","sha512":"bbd090400b50003a371b8aa990238837fdfc2d9fa9d041d66e0fe080cfada5b13a3a54ab2f046099dbbbd432d334b7f6940452845e4ba697bee5e77c74eb33cd","ssdeep":"","tlshash":"3fa0025eb43a2949460a9430b8772445252d395c44846294666609e50b942879049f65","size":60,"data":"","first_seen":"2026-06-16T11:06:10.660578Z","last_seen":"2026-06-18T19:56:45.974443Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-06-18T19:24:11.19181Z","times_seen":48965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"66f81c323f03ce2147d6655ac2b444fd","sha1":"96500e4e19b004e4e06d4f42649533db27f3e041","sha256":"16945c0346d0eaa828d9a3d69c27943c1f3bfedf081c4fa520211820a5083e63","sha512":"815c43deedd296eed1312b554e1ab67c05ecb455eed488bd648b249beb3818491cf9e61195b6aa1a26869fc65eab39dc2da2c55e670dcf40b1aebd947d17cda9","ssdeep":"3:N/BKL1X/RaXXn:eL1PR0n","tlshash":"c25504c054547c741510d410d35114155145050310550c01f05d04d4173014000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.846272Z","last_seen":"2026-06-18T16:06:25.846272Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37b007a08b4c6fddc9310bb5a711cfac","sha1":"5cccd9c1619c77aff109562386761342ebb169b8","sha256":"761743e95d8ebe80041c9679afd18599df86a9afb053d6dbba3452d27dbd79f4","sha512":"d46e0c44e8799bd3b283a3d92cf2d06988e998c6f9332ecb9ccac074370fce2e71719bc42f3d8380073e4dbfadf5ca8f0b45e90d40b223f3e00c0536631df595","ssdeep":"1536:A+RDl35kVfhRMGKHD+LxgnmeBDHYOo8LDgS9:rbSVfYEGmeBD7n9","tlshash":"a7532c987196787313d980f0a17b6743732a7d3aa94cc850d827d865367ce8a9233f7e","size":65582,"data":"","first_seen":"2026-06-16T09:36:41.625096Z","last_seen":"2026-06-18T19:24:11.042429Z","times_seen":3644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f53bcc6d455944abb38d8f3745e12f7e","sha1":"66eabdd7dd5f90f662ca9eb9db09b1fcaf18599a","sha256":"3bfb2bb7022d2cacdae8f609b6637471c6fb13d8c92f78367f623494ebe117e0","sha512":"78060e64c28543ff5cc2c7c675bbff9baa619d32cab5fd5927959e08fb7ad8a233766c0626fb23e720eaf5f92a0b062fba1b13d9f37f9fc2702fefa41d5100ff","ssdeep":"","tlshash":"f9d0222bf0be1e68d18100793cbb3428cd3f3a5c2804ba826b2b18ca0b820c5d0c1f76","size":195,"data":"","first_seen":"2026-06-16T09:40:41.466738Z","last_seen":"2026-06-18T19:24:06.336461Z","times_seen":1550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3d810154353549acd279276a7c04d74a","sha1":"73cf24a9b7fdeeffdfc622dfb663c8b87096ed98","sha256":"a5c79737452cb5f0aebe27ad034430a8c13c65f0f5c0432491f86a8c01e41dcf","sha512":"274d588d986d1ca3af3e9597009ecbb441fbb517688762e68a0c91ac539bc28c69a98ab3592f05c71446d447584063d7fba5a08260c2ebdcf53a2554f0a1c0e4","ssdeep":"3:N/BKL1X/RaWi:eL1PRdi","tlshash":"a05504c05454fdf41510dc10d35014155105150330150401f05d05d4573404000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.848Z","last_seen":"2026-06-18T16:06:25.848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"764f6ee87879cb263592b7d9b9ca3f27","sha1":"601864272379c145349ca38d8c69674189a79e9a","sha256":"6e2e895c70cc136c2fe766a1f3bd09262511b09ff4164f34f9b5674d4ff38da0","sha512":"d2de5b00743563a694290fd2442071cd5257b401c3cb30ba8a90d5dcc9ff1b96ad29c7d0b175534498a25f334009379a46ef653a00ed42a90a368bf081199292","ssdeep":"3:N/BKL1X/RdXn:eL1PRdXn","tlshash":"e95504c15c4474f41511d410d1503c157105051310150411f05d45d4173014040d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.849334Z","last_seen":"2026-06-18T16:06:25.849334Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"49265ef9b27bfb7b71c2f104891cacdb","sha1":"2326420ada392673cea8146656288e27de94bd30","sha256":"022a3987e27cd4215d069728eefc8c516b0aca2195752b9bdeb8772ceb4c5398","sha512":"b40d6065334c3513331675412b1da77d02e269eb8fadf33553a5844de01ceae0eb42b54ee34fdedf1bf69d1c1c243da6a10830cbd28df17a41acc19347e0583f","ssdeep":"3:N/BKL1X/Rac0:eL1PRX0","tlshash":"e45504c054447cf41510d410d35014155105050310150411f05f04d4173014000d0dc0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.850537Z","last_seen":"2026-06-18T16:06:25.850537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0b6ee8001e0cf6a2c10c55184a77068","sha1":"c26143c3d9978c2b7bee275ea0b8106fd0aafaee","sha256":"b4832d9b49ddb60cd28d2886b04b121eb385dfa605fcf23fdf17d37feb9c1567","sha512":"fa6c5c21e73e976d36c91275ed84996ddeea6ea3440624c36bd4ff606afd93ed730e554d20640c746b5cfe34454ba9b8235887b5a4f7ddda9129f538ebf54c46","ssdeep":"3:N/BKL1X/RcV7n:eL1PRwn","tlshash":"4a5504c0544474f41510d410d15d14155105470310550441f05d04d4173004400d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.851868Z","last_seen":"2026-06-18T16:06:25.851868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-06-18T19:24:11.175647Z","times_seen":48865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/3e066ceb-70fb-490f-ace0-3d677f4588d3","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-18T19:24:11.184349Z","times_seen":2353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5d947082d104915017ec539516946ffe","sha1":"0cd4f20a7bee1fd61817ca4f4849cb0672752050","sha256":"000d7b63e5bfd8862d18a42cd6b31190b0ac3ef9e2aa3afe726c04b76aace6c6","sha512":"35b411ba712060adec5a1ce3283308fe62ed65b420ce283dd162809a12fe675112623f03ddf601a6d41d7589362687960b813ea41abaff9f3772c3b2bdb0bca0","ssdeep":"3:N/BKL1X/RZJc:eL1PRZS","tlshash":"3f5504c05444f47c1511d414d3501415510d150310150403f05d0dd41f3004000d05c1","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.853853Z","last_seen":"2026-06-18T16:06:25.853853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"06aea204c9ef4a3c766d0f7d27e38109","sha1":"b29bb70cb86e8da027ba3cda821b0caf90eff286","sha256":"ca9fb9bbdfd105d5d169e6a17cedce021484d3cd6fd5516832c00131d501e7b4","sha512":"1a43e9304918a1cb3638b18346efafe18eaa5c7d2d9076f983e3b9b044b8c736a615d0ddf4af1dc911feadb096c13fa749395c950f17c8177818e10924d2e45d","ssdeep":"3:N/BKL1X/Rb8n:eL1PRb8","tlshash":"165504c054d47c741710d410d1d0141d5105050310150401f07d04f517300c000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:25.855059Z","last_seen":"2026-06-18T16:06:25.855059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj171 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj174 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj175 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj178 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.711883171960353] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj173 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj176 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj177 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj179 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.711883171960353] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"phase2flare.com/poweredbtcky.svg","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.543Z","timestamp":1781798666543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /poweredbtcky.svg HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kOqNmVAuWfuqeKtTGc2n1RZpvyAk68Chy5wCFqqzD9s%2B7PTwBq3cbX%2BstS2bBdTSK%2FH8EAa0xq5rLLFyeFQD2MV6nmfOmtHSSH8zP22yaG5j1jf79F%2Be9yqRcYtRdny%2FDk%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"2e4df113ede6d5ce8de2dc1338a3890e\"\r\ncf-ray: a0db87a1ea09b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3762,"size_decoded":2051,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e4df113ede6d5ce8de2dc1338a3890e","sha1":"3af1721ca29f4ada0cd422206c253cf8ee52781a","sha256":"911f58b8d14bd6f73a83fd774e44bec97e896317c7093dc83e96921e64f1fbd5","sha512":"12c975049692f337fced697963359f535b7d08b4b230447cba37b6e5c8c1fd31e8f26329a315454c83e51ca41787737428e3932979156e205cf0feaadde8fb97","ssdeep":"","tlshash":"967195cb36ec61e0f9006f78db2b20654dae34f666d1d3d59540fd9564a2e9f464ccc0","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-06-18T19:31:13.750009Z","times_seen":30321,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/Elliptic-1.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.893Z","timestamp":1781798666893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /Elliptic-1.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"418e8ca779ee89f651aaa9add5c78c90\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ohsx%2F9gQJkfxMy%2FcpW2pDWHYH3ryqz95l5%2FaRZ2BXXxc8hLF8dORCu0cTKs%2BD27b5txGhNhftHL7yf55JPKz1U2F%2BuDZ9iVwdCIWet1mocb3eV%2FXinYVfKEitcmAWjkse9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 526\r\ncf-ray: a0db87a41a79b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":1239,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"418e8ca779ee89f651aaa9add5c78c90","sha1":"e0af31da3df7bd0c0957796905616e771db98715","sha256":"85fc06aee2ce609ce0b14ec5ff91fc24d44246613ebf59017da1435e2e61983f","sha512":"90b49903acdd17f9b0882732ceaef0207c6d6147c8673ad2e9404432ac4ee4837ecad27ff17bd656d76b33afdd6e4e8142195ad3c669ae299c54897aeb0f34bb","ssdeep":"","tlshash":"83f07544b23004ebdaacfa3201ec2e891955c10ebf301921124ee9d21785babf433ed0","first_seen":"2025-08-11T21:39:04.774047Z","last_seen":"2026-06-18T19:31:13.712988Z","times_seen":33,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/FAssets%20(1).svg","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:27.069Z","timestamp":1781798667069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /FAssets%20(1).svg HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nu9kSAGxhJuxwjlUKGuHG3cgKFdhxIysNqtJEClzozrcbel6FdGsCMxJPv1lxRdHoIYEs3Fm6VvHVgTD7EK8TrH9C3mLHZNiNQxJWyP0SOfxBLVBwh6IIvqpfe4HsDrJaYQ%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"791afcd30e640797223cddb9e71c4b02\"\r\npriority: u=5,i\r\ncf-ray: a0db87a53accb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5973,"size_decoded":2962,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"791afcd30e640797223cddb9e71c4b02","sha1":"311cfb7ed5c7befab02b7d82af94d4e1459e790c","sha256":"b6d60256961e6c438cf6722481961f3936cfaa0cdba7345c83d7dc1e91d9b935","sha512":"752352c2bf83d59d448219e4e91b6964688f8a843a233ca385707280e9c6b496c9cb140ad287d8116d25508816cd7e2288a3ed34929d86feca03c32dc61cbdaf","ssdeep":"96:P9KSr0KTT9M+P3qpna3TU/Awbq1N5HmCcfZ+HbJm4q+REFy8C1fhY63k:VUKTTOeaFlovNLcfQHw4zmCNhYQk","tlshash":"70c16380337c93b5b841e3761b4ea039787764e4ba044880d6e63f05b689a9f5dacbd3","first_seen":"2025-08-11T21:39:04.7375Z","last_seen":"2026-06-18T19:31:13.725137Z","times_seen":31,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/FDC-1.svg","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:27.071Z","timestamp":1781798667071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /FDC-1.svg HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pchDglt5Au2lkVzY13pGUxxug8n5AxLhmQ74bzFlgsIWQdc4kZh96mcpxn4unW80%2Beuj%2BHeC%2FWMaXRkUczmjdjwOiV%2BevIlfIjtlMaQvDNXUFpkrk3YRKTouGKqPH2sUZ80%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"ef5cce942cb6a6ce5cc385d777e743db\"\r\ncf-ray: a0db87a53acdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6621,"size_decoded":3380,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef5cce942cb6a6ce5cc385d777e743db","sha1":"26dea5d3314a5cde9c4a7d0ac7418578d8536d89","sha256":"1f9f4bc9071c159a6a3e58fcafee08caf55861f295b1a8af0a76941be15b3970","sha512":"2babf9cd06ce7005f8cb66da1875b492532e6030394eca5ec9db70a95eca761179f766cfb05ed80596219ad7e5eaa04a87f1628e1b218e4b0a92d631640b4a3e","ssdeep":"96:RaQb8scbzGrg4hnNG2E9z3pCfuVPK8NltmFVy14mta9YEy9e3C38/mlOaTIb1Vdg:Rpws4GrgANOnVPK8FC0haJygCWQWi","tlshash":"90d177c0736cc3f8b484e378079e603a682b54e8b65554d0cad22f4567856ef2ce9fe2","first_seen":"2025-08-11T21:39:04.755564Z","last_seen":"2026-06-18T19:31:13.704784Z","times_seen":26,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/home_secure_desktop.webm","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:27.072Z","timestamp":1781798667072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /home_secure_desktop.webm HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WR8Wncz0nm%2FwAzhHmJCnyPXxbi30HRfPqQM3dg8s4rDAV%2BJxAmTvj2hSqxdsR2R%2B57LIfzxwEpGoK%2FTaFno1MWIzLcRf5QVsLUBYc6IpA2X41GvJFshglAQsvIHFYZKTa14%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a53acfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":555,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/favicon.ico","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:20.214Z","timestamp":1781798660214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2flare.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nK3b3D5iMWxJFd1DrQiIBT6vVGTa1WQUzgV6B7H3a7btgk2FpK20lz40w5G%2Bo%2BxP%2BzFbdDwQt0VvCwfKeGPvnSpcwG3qhxTc9hQQBpL0QDsGjJQC%2FDAZnNtQzfKsnTSttUI%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:29 GMT\r\ndate: Thu, 18 Jun 2026 16:04:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=4,i\r\ncf-ray: a0db877a59c2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3507,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-18T19:31:13.70531Z","times_seen":71,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db877acbb9b521/7YC8eVymZbnIaFHtdbC7BPbU4KLkKYGgzaKp7c_QYyA-1781798660-1.2.1.1-IO9dqSQFIOdV183R9jKlkr5pjDpjelzB_DwHvIo1cUFuh0BIUO1dkPbOMj4.X5ZH","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:20.669Z","timestamp":1781798660669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db877acbb9b521/7YC8eVymZbnIaFHtdbC7BPbU4KLkKYGgzaKp7c_QYyA-1781798660-1.2.1.1-IO9dqSQFIOdV183R9jKlkr5pjDpjelzB_DwHvIo1cUFuh0BIUO1dkPbOMj4.X5ZH HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 7YC8eVymZbnIaFHtdbC7BPbU4KLkKYGgzaKp7c_QYyA-1781798660-1.2.1.1-IO9dqSQFIOdV183R9jKlkr5pjDpjelzB_DwHvIo1cUFuh0BIUO1dkPbOMj4.X5ZH\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4674\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:20 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$ZKlR1y1yAnF2S0rqZ5P4Vg==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db877d3e13b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446476,"size_decoded":336802,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c3295dd575b0eb17eb080826f8fc25f2","sha1":"494c599c24aad94e942492d615d5690d15907a28","sha256":"94374ec456ee68907d1182a26bbb219d2ba681a0d0478aefb8ea9b110b0f3537","sha512":"df516479e09de9b2765e53d454c3e9954b5db1fef00ec2023a7b0c94deef97fdef5fd1f223b7924e4ef8728c244e6306815b339e2e36e8685749ec91dce0bc30","ssdeep":"12288:Cr6JrKZY4ZPi9BT81l1NJi6QZvqrB4rdHtv4Jic:JGZVNi9BAH1a6QhqlYR4Ic","tlshash":"2594236f49a01e5d8ad5881f53f3e84715a84e144071bae0badc3ac7e48ac561b389fe","first_seen":"2026-06-18T16:06:25.783656Z","last_seen":"2026-06-18T16:06:25.783656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/579c7f5cb4a415ce.css","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.453Z","timestamp":1781798666453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /579c7f5cb4a415ce.css HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"c986ad8c9796cbae33d49deb8538ba5b\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UANptD8CZe4R8QogjWbVOytBf65utLI7APnj5Af%2B8h0gfai%2FNMkWYXmMsWzvCed3161BD0nBrPjm1ZLr%2FNMuXsuDdX8S%2BtZ1YwpeiWBPt3XXJF1DSMmJNk5K%2B1EvNur6s3M%3D\"}]}\r\ncf-ray: a0db87a159f2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30481,"size_decoded":4625,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10182)","md5":"c986ad8c9796cbae33d49deb8538ba5b","sha1":"357407f751a8b8e02ff98621312e6d58f84c3baf","sha256":"e35b0fea230c68bbdfeaccd85bec05ae7f46dc53114cccce2a7533826c6ce385","sha512":"d078e7a477b22f951c3e29fff59bc5af1e34ac2b137ff8b2501d8104d62e06eb08fa9ca6b177cbf40a8c46766e53c71e31dad4698eac7633d459ee60c912dae3","ssdeep":"384:G9PqbwLV0qxkaEHS+0f1x9gMcHe+MFBohb+GsWNrChqkALVb8xMqlhiqKyj0xntA:2acx6CKN2T","tlshash":"ddd2ad43e2f4173f605e1186f9828948dfc464faa1968fd0290ecce594da7b27af1b47","first_seen":"2026-04-24T15:23:41.461599Z","last_seen":"2026-06-18T19:31:13.740981Z","times_seen":19,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/close.svg","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.542Z","timestamp":1781798666542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /close.svg HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tCxpGHREMW%2F5MMNuXCbMvARBaKBRdhsS8%2BH3GNRgodwhq3Pvaga9mVvqBKYhBqEoo75Ao2B6RW2UusIMsWF5nd4tRuzpEKZBMentC4juh2UvKxbyAXcG3DwYLfDB8kimFY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"463a29230026f25d47804e96c507f787\"\r\ncf-ray: a0db87a1ea07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1374,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-06-18T19:18:23.994501Z","times_seen":60436,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/home_providers_desktop.webm","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:27.073Z","timestamp":1781798667073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /home_providers_desktop.webm HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"df30dbcd8600113637cff696c21b2b82\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PxXMYrfm4XiYjnBbldJ0jmsa8LM4V11s6x2YQ8rZ2SrudWC63mW1HmRJvMVQfePydXxB8A4KqwUyfjqFouvnlPP8%2F6a2FHQV%2BwXoraGKNXONH8ccO2n0LY5aPuXBKur%2BSGQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a53ad0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1267259,"size_decoded":1267926,"mime_type":"video/webm","magic":"WebM","md5":"ee2f09b30522d734be219fea9eb6b652","sha1":"6b2d4a6f78be14a1c1ea569c5c160396ad19fcd1","sha256":"802018a8d524b7c30540a7897c55ae1efa17f6ccd142e02d799c8480721e8449","sha512":"14b541f6615eea0028ecae7f55241185ce41b94a11f484602ae5b1934da1d3b8bb3960caf46ed1b8a65c9053444b70c00d7c1c5c6c1e59dd468ee60ea950b6ca","ssdeep":"24576:5JJ1VbEOGs0BDMeeobFxHYENSOAMma9tj9/e5gbIjpjMqZ:5JJkLs0CkbveOHNjogu","tlshash":"6925339d4ccaad43f09d84f9ad2442cb0a510b9193c684bad5bd334fc5b32eeb6751b2","first_seen":"2025-08-11T21:39:04.769941Z","last_seen":"2026-06-18T19:31:13.728005Z","times_seen":32,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a0db877acbb9b521/1781798660681/6119cfacc774f49fb0baefe12713babc07ea1565611221077f83084d7ab4750e/Y8EicI4U4-JJiYb","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:21.626Z","timestamp":1781798661626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a0db877acbb9b521/1781798660681/6119cfacc774f49fb0baefe12713babc07ea1565611221077f83084d7ab4750e/Y8EicI4U4-JJiYb HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Thu, 18 Jun 2026 16:04:21 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gYRnPrMd09J-wuu_hJxO6vAfqFWVhEiEHf4MITXq0dQ4AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyBHLF-lucvyi9hjdYkuqs8rq9jDD7W73LexEOXNJLcqHRltJlI0qi-wEaKJox3O8FpL8L2tGOsB8-7D8OhU-VC8suumBQK2IwNs8jRYCQD1KSFgwv7BBStOxYCxbAKpN9Ypo3e5aG-pzMZzRNUMMLYs6C8zon0bqWg7Zlg-4kZiTPXKGTcwAVrMkY-MltNfg2tgCls55BhqL7JRgwKLowvZx4xWBzqXuqt1g3nr7gR5-WK7ODigltYPagj_HAMrUAsomf0WIdz4pFfM98Icbiw_-HQiLuHKbA0dJ9M2KKrZzGuE0NrNabvwJgGXq39wNnSg6JpV8plrO5z9UMboztwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIGEZz6zHdPSfsLrv4ScTurwH6hVlYRIhB3-DCE16tHUOABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAn5A3z69BM2tpdtMiEi2FJN8rdQPZY_W0518bUO3Z-m5RQN3lwSoA_FaQ-G_LK49f6fkTjz3VsQyKxJd--2ZTy34zma1svuR9y0N60ZfXaK-WajSDpNN_VFiY3Q6hZ46lswsS3krxEWjOB7AItiy1pnUdNLka7Xan1f6oHjTR1HlWzUOMa4uYZHQ7D3zu3XjaM3Z7_jxcZeDnUC5boysrhtLG38U0x_g0pBtgnulTV4xhqrG9hQS4ebALfEtbh_9_wIUAv4BbxEsZKRuXEgdv1gjoJOqesnfi5AzG5dEFxTGZUCPIO1_Iagu_2yPzPSJIrjS2wjyOzIP_7Eu2I3-gXQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIGEZz6zHdPSfsLrv4ScTurwH6hVlYRIhB3-DCE16tHUOABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a0db87833ca6b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:22:45.753745Z","times_seen":462331,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/6cdcfbcc140e7bef.css","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.444Z","timestamp":1781798666444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /6cdcfbcc140e7bef.css HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjukZX%2B3oG7UV7jlHOL6ZcOneSKvXnDiANnc1R%2BxQasgL1MziODLGomSPY882J%2BbAm%2BdjJhPs9csjuRkvOjfCtQ88%2BkzTQj2onjfyGo3rPyUWB0BV3oSYJ%2BtxF6iKmi7s1s%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"9e03833ab9c10d491a04b6dae234ef09\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db87a149eab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120415,"size_decoded":15333,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11939)","md5":"9e03833ab9c10d491a04b6dae234ef09","sha1":"69fb24e452ef965718a0d642cb5b82cdbb00d1e6","sha256":"9ce5d79c8b23756bbfb0929f53cd795e5328d3b92f13b78f0cb0873c3e6015aa","sha512":"43d0131d1c76623eabfbe78b300fde4a1e9db2c841220dd06fd7cf4dead24941a0d11fd42958c94cd481f2e6e12bbfa8f4dc86e56211c4421919db74cdd0b47a","ssdeep":"384:S1nJibNBbTA8orrhvUHQ1SS7GK40MAEQgzROuxTf3C5d2PgiKPVID8JXF44pivra:aZovqqlGoBB1c58rmsWNf","tlshash":"ecc31f43e9f4133fa05d2106f9d16808efc0a4ebf59b4fe0580edde54489aa66af2747","first_seen":"2026-04-24T15:23:41.464721Z","last_seen":"2026-06-18T19:31:13.751042Z","times_seen":18,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/home_providers_desktop.mov","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.779Z","timestamp":1781798666779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /home_providers_desktop.mov HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuW1VDDPE6vquS6xB5pc1Cd1Pli4M7WDxunQhQ4vfb97lCU2MqZQQm9HwbalP8Oaf6KSXDhyQMwgnvlQPyfvqTj6VhxX5%2F1zXI4D2ppGqZFWYG5STWzfsiRbNttMXoR84kg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a36a4cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":522,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/banner_main-5.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.887Z","timestamp":1781798666887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /banner_main-5.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"ff4cef6f77c80d86a3f7c2d73ad39f2f\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISQ2nDRCY%2BKeFotEqUs1GjvccBh4YtznFvWHr0%2BJ85Lt1UtbM0Ku8AgX4xPtKp2UXbipN2GmPnjdnsutIGpE0uup88q3b1rro0yZarVmgcihKd8GH5yZbOGbmWPYOzDMh2A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a40a76b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20492,"size_decoded":21154,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x173, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff4cef6f77c80d86a3f7c2d73ad39f2f","sha1":"cff4989c30b3b46480f0e10cab01bb47e6ff8377","sha256":"fde9fd86ecbec2f137dfaa12270dfc5f63f35109669616629ca452bca6576f05","sha512":"63b338afe19096a78c5d49c4f0596cd67e5c77a66cfd4967e44f859ea32f1c59f61db0f1eaecd22036d4904a9db51e8612f7accfe548943b6673ecc3945fca70","ssdeep":"384:hOJiUHQHGe1qLqH1kBxC1LuaHiDcyd0aDPKxb+FXrqzFV2AvqsMX:hgiUHR2VsCxuMiDTLKxb+Bqb0ss","tlshash":"5c92d04f440ad2f6f101aed547bcd9165feab8ecba770250708d747801b60a52d937bd","first_seen":"2026-05-16T18:13:37.170366Z","last_seen":"2026-06-18T19:31:13.730816Z","times_seen":25,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/XRPtoken-1.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.889Z","timestamp":1781798666889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /XRPtoken-1.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"92d6dc10eacb6ed595bde9d339411440\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgSgGQBUPdPLg%2FAM9tLdLXtYVYBxgVNNQIVBBsPbCtgwllbwxvDpEofIoWKBtwc%2BHz91BATRzNmKMVMJsmT6iBYVPlMdLh%2F3yzNMdRc%2B%2BCd44it03PWkLZ7Sd%2FomtgKNAfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 770\r\ncf-ray: a0db87a41a77b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":1483,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92d6dc10eacb6ed595bde9d339411440","sha1":"b48cf9e7539432a267da5f2114c40d664a01a057","sha256":"f83d42e9b60e17ae4196b83256f08c986190602da2f3bc1744a6f5fbc5462f08","sha512":"a93bca4f8c6b5ad30d568a5c644e2fbba8aadebb169044943da32b65506c99984a6d6f4e9921f92b4dac1c27242c000906e72a6a086751efaf8afa69312fe690","ssdeep":"","tlshash":"f901b5668114991f4e481e1cb334b6a6f3474ac94a2178b8cda92a48a42d24c6067fa6","first_seen":"2026-04-24T15:23:41.472889Z","last_seen":"2026-06-18T19:31:13.723524Z","times_seen":17,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/Arkham-1.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.903Z","timestamp":1781798666903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /Arkham-1.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"5f931f5036e2902f0ea2ed199ceb772e\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LckKP2iapFolh%2Fmvd48eDsgqtq8p1TsG3v5svym5q5dewZyJBNg2C5J4tzpbsAOu1xeMSHyYLk7GOIOl7AHd4yKueMjTal8svyuyqiyXT%2By4V%2BgPLO%2F2yoaR8NdLtSbNbEo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1652\r\ncf-ray: a0db87a42a82b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":2362,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f931f5036e2902f0ea2ed199ceb772e","sha1":"40a5df06dc1fbf155dbbd95f3193dbefb3c70ed2","sha256":"2b99ad22545742a421f1ab0bf14700111ec6c3e0d75898d9fa13827aaa415613","sha512":"4d7f2ab2d84effea446962fb5e101d3c3e49dc8f19ebb3b81b616e84111b620b3454448cc083229427f324bed6929b2a2887f7bf6d203ba4d7cd14c58798ecfe","ssdeep":"","tlshash":"0731180a4532aaab916b910a8938118980caf1792b212a5b2d372298c90eeea57d3058","first_seen":"2025-08-11T21:39:04.762048Z","last_seen":"2026-06-18T19:31:13.720747Z","times_seen":34,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/HexTrust-1.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.904Z","timestamp":1781798666904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /HexTrust-1.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"3978f7542bed8e61360ecae12e999a7c\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PoJupFqV2pjMtfDKY7rkP4U1STjsqcXuqYObHLLPQ3biTUEJEls7dR7r6xzXT4%2FKp%2BduV8AfHVX3yR4nsMLe8lqpye%2FICkJNpVf13UDROgKr%2BkZEVJsRclMDM5KMP5fAgak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1832\r\ncf-ray: a0db87a42a83b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1832,"size_decoded":2542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3978f7542bed8e61360ecae12e999a7c","sha1":"69e859543324898cd73c6246d558293b93497248","sha256":"6afbe97b7becfb2b0008dfcc0f04267755bb64fcc00c16b7e875287f19c5ca79","sha512":"ab2c7958e052736ddff1931a1b744db235463d89f31bbe957c984954f31b26a506ceec47c5825926d0012da93bdab526b1565b7cd0f4bf5bdb951a2d5aa3ae0b","ssdeep":"","tlshash":"5a31eb01d636ff5d3fffd0a20a1796c7d4da71822e15170420702d2696cd0ac98ee57a","first_seen":"2025-08-11T21:39:04.746858Z","last_seen":"2026-06-18T19:31:13.721396Z","times_seen":32,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/newsletter_nav_widget.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.688Z","timestamp":1781798666688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /newsletter_nav_widget.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"7fcfa9b2d46f276f007908d1eb643223\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=op9ku%2FgmPR%2FiAdfxz%2FNR0YSVVv0zRrbgI5njaQsxWgFEYSf2w9hzM7K8Au9lgAXCW9g2ENTHHqjUEX3%2FEJvrgyELH%2BnST4cJS8WQ77zfWu83iKcN0TFknenGc1QWkRvesV0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a2da30b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39390,"size_decoded":40058,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fcfa9b2d46f276f007908d1eb643223","sha1":"0060950df385fee6dd2b9cc45cba3dbbb780cb84","sha256":"a9ec7624b82cc2f299e25d60e73e76eb0e3ff8de981fead18779d080193e8190","sha512":"201085eb88672b3c7fe0f8237c343dcdd07785510fd8e00a4d8021dfb8c128cfe60b8691e605fa84a0c435e21ec315a940467c1cc5a9120bb2966bf57ab6611e","ssdeep":"768:XMOzRFTm6vBXbH0iVvc8z/hI+jOFlz//Z/2JAokDCgHv3XQUJ20omLLvT:XTnm6vBXAgc8rhvSl7hQAokD9vA9m7","tlshash":"4903f2131987814a7ccd309953548a09a9715dd8c4532d7128cabff386e6c8a1debffc","first_seen":"2026-04-24T15:23:41.45609Z","last_seen":"2026-06-18T19:31:13.736266Z","times_seen":29,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:20.389Z","timestamp":1781798660389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a0db877bbc83b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"ad7d5a736fbca8ce9287639cf6f6c9b0","sha1":"9f447b67db7c660e8aedf354dd9c1a9921ad7be4","sha256":"3d66e62694e6b8e9a4a78ddd800f100cf4f864eb0decd906374b7a8093035e36","sha512":"4894052d7bae349efb57911fdbd2d49e8b094590b81e8fe621ac39612da0997b962aadd6a636fabc184104dafe1f5ccf598c21155b210d5c0cc8e7c82e8ea6a0","ssdeep":"","tlshash":"57a012c56280ed2fc14d0332d5642120f8301182030301700143c8214521e0586a4943","first_seen":"2026-06-16T13:47:29.17358Z","last_seen":"2026-06-18T18:28:06.650948Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/assets/framebundle-grid.js","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.541Z","timestamp":1781798666541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /assets/framebundle-grid.js HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mt3MNQpbBc1Lo01kMzMYnSteadeMX%2FKli5p4szn%2FmlC4BAn7hBPww30DgeBeIbFMOVmPTdS%2BrZ0zfn%2FhhoO64UVnyPrxd3FMX7550TFP2XpKPQN88Y9dRlutAo6iSyRQkhM%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"5e161a58584c75d64fced9975435c680\"\r\npriority: u=3,i=?0\r\ncf-ray: a0db87a1ea06b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521230,"size_decoded":185937,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39994), with no line terminators","md5":"b98d29e2dc4b3406e48e10322fbe880b","sha1":"8a21df07399f415b241625f36388c094c6bafb4d","sha256":"e44df1c892d383a509e30acbde628c4d7a2cfc44ef407d6714ac601b1087a564","sha512":"f4d98e6509fb04ca069c0667833c55a2c78ce59911ef40cf1ace5d80a3a841ade4922af9adfaebcffece62e3fc601c1039fa8b1ba584c36c21495a4e7723cd9d","ssdeep":"6144:KnojRHkzQRByRCSsmDquooQm4uVfgxlK7ioXGhCVjdEhp+xwnWWhDOksozZ:KnsRHXRMYw1JlAU/EbtsozZ","tlshash":"32b4f97d8c207956592de011b502be0f2478796caa61f9b7373063b792bf8c79be4c81","first_seen":"2026-06-08T14:46:54.916871Z","last_seen":"2026-06-18T16:06:25.800532Z","times_seen":3,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":426,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/home-page-landing-big-5.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.891Z","timestamp":1781798666891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /home-page-landing-big-5.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"381eb073afaa8b27620d005c6765f4c0\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gFksNBqVUkrLl8zjddjNQBhrmg8dfPX0ALmeyYOMa3YFSdg%2B7NSC3%2FSqEwMhB5r%2FODJBqhsLjfQ7iePDNkUAdcQA29IeRmpMz0qboAKAFy%2F%2FvEqRKNIwG6yyE4fOUI%2FWYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a41a78b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247196,"size_decoded":247866,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"381eb073afaa8b27620d005c6765f4c0","sha1":"1e43306454ffff3774fb6cc01e5daac43061746d","sha256":"bda8027aa589340dc634d185006f96ba5fdf8bf5c9b9bd5f176a4b6f0242f8ae","sha512":"f36780edf69b8e4065f80585f3c1eca76a96347ce21c1586d4a2ead2fb5aeaacff6cc6880891663d2dbdcbb07b3f4ae1c61a79bf399f2c3a6c99c580fbfff2fe","ssdeep":"6144:Q35zd75lysY/PjTcB1ToAnF2q1/pXuFiT6WQ:C95lypfUpoAnF2q7uFiT6WQ","tlshash":"be341349fbeda594567f7e313fe3e0576d8da54302c369746339813b00a85a6fe0a2c8","first_seen":"2026-04-24T15:23:41.476188Z","last_seen":"2026-06-18T19:31:13.729646Z","times_seen":37,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/thatthatnewpixelfamilytest_square-s.p.5c25c1e8.woff2","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.955Z","timestamp":1781798666955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /thatthatnewpixelfamilytest_square-s.p.5c25c1e8.woff2 HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7526fa8e83a73a9f694eba8223795de5\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWzea3TfCWf645XmWQhg3A7NxnqFASqXLkf1Dorh%2FOI07vCFOdRKHD9fRbZX%2BSSarz3MDiJV7Gt7p%2BR9QqBZIyuRZdO4OtytbD6tBxxS7Mxli0leaalbN%2BqJem6gz678Eow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 5516\r\ncf-ray: a0db87a47aa5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5516,"size_decoded":6229,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5516, version 1.0","md5":"7526fa8e83a73a9f694eba8223795de5","sha1":"6f7b482dc8ce577c3ca11df24997c7bd54959de9","sha256":"4f889410a75a15c856b6b317d13204a6cac75be1035dc10658933cec9f7684e4","sha512":"66eaa1cf4bcdc0597604b08a4cf334a93af88f877f8a4b06ed73bc8e332b3b5d3ae5d756e13b031c007346722091d51638bfe27650e46aa779a2f76970e70cb5","ssdeep":"96:C+mKG30pLRQgPNbGMrYRXoj/oL17R7z/JUyOoJcpeqOVSOXsXV3DWgupbVnlG35X:CPEpLRfNBrYVA/oL1pO3oJcYNgO+Wtpe","tlshash":"0cb1b08dfd826fd6f64600b5ced78491478cd70b91f93c5c66ab932e1e8e4086049474","first_seen":"2026-04-24T15:23:41.456915Z","last_seen":"2026-06-18T19:31:13.721946Z","times_seen":17,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns.google/resolve?name=wan-milkshake.mom\u0026type=TXT","fqdn":"dns.google","domain":"dns.google","tld":"google"},"ip":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:29.987Z","timestamp":1781798669987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:39:14 GMT","end":"Mon, 17 Aug 2026 08:39:13 GMT"},"fingerprint":{"sha1":"E1:CA:BB:2F:D6:9F:4B:85:2D:14:17:00:1A:CA:4C:9A:09:22:39:FC","sha256":"FD:35:DC:45:92:97:58:93:2B:85:8E:B8:AD:F6:CE:7C:1D:7F:BC:F5:37:31:DE:B7:6E:5B:9C:AC:FB:B2:DB:87"}}},"request":{"raw":"GET /resolve?name=wan-milkshake.mom\u0026type=TXT HTTP/1.1\r\nHost: dns.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2flare.com/\r\nOrigin: https://phase2flare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ndate: Thu, 18 Jun 2026 16:04:30 GMT\r\nexpires: Thu, 18 Jun 2026 16:04:30 GMT\r\ncache-control: private, max-age=890\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: gzip\r\nserver: HTTP server (unknown)\r\ncontent-length: 193\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255,"size_decoded":710,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c2e3a231c029090daf5044a2b5466212","sha1":"009292dff0b86d34ce22f8cbeb88adc53af4a858","sha256":"67b66e6aa083bd0b83cebce4c54faf4f4dab5ed81180bef6248e8c45d7903ccf","sha512":"1b3445b621d7e9690dc50f2334dfbc224223d1e37b280ab68d8ba4101da6990376369fccaf80b78b88f45f53a0ce3836f3d6d35d6ff7b19517f4b95567b800fd","ssdeep":"","tlshash":"ffd05e56c430c6b8ba0521cd4983656feea42a62f48c0cea668d5ea5f22b1d5b083817","first_seen":"2026-06-18T16:06:25.803061Z","last_seen":"2026-06-18T16:06:25.803061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":5,"connect":11,"send":0,"wait":15,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db8776f84db1b8","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:19.895Z","timestamp":1781798659895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db8776f84db1b8 HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2flare.com/?__cf_chl_rt_tk=Gzk3vQZSKT6u.kRXtXW4LMbSlZ1Ew6_UaLioH_w1zyw-1781798659-1.0.1.1-OdrP9wUxTIVtSQ__xkXzjZaKxCiw2NIGWjywCmeV3Jw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Thu, 18 Jun 2026 16:04:19 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0db87785903b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191019,"size_decoded":71978,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f907e01e2e23e01c417a35bd57059044","sha1":"836733220a6c82eee3db3d32133e09aa49a9211b","sha256":"492f481de4f121e1e5d663089b27ef44638af144ac6faf1ee16f83f751606eb3","sha512":"f70ae42b2588c3000241faeda64af0efc8c5db022b0c1e848ecea8f7adc035cc720d617cf9d009821edc8333f1b08506ce1b0dc911c97d8bca1d06e84d5f550a","ssdeep":"3072:r1vayw9AU4KFLoADsDGdZZYr3lTIzuV2R2CBYKmSJArWrUvad:r1vayw2U4KFsADsDGdZClczE8UWrUyd","tlshash":"5b14f7cd3bc570471292ab7501a77ad9b23b5c80013b682ce441a1d4fcb2b99f5afadd","first_seen":"2026-06-18T16:06:25.804959Z","last_seen":"2026-06-18T16:06:25.804959Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:20.185Z","timestamp":1781798660185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://phase2flare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 16:04:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 15 Jun 2026 14:57:09 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://phase2flare.com\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db877a4ba556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65582,"size_decoded":21836,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"37b007a08b4c6fddc9310bb5a711cfac","sha1":"5cccd9c1619c77aff109562386761342ebb169b8","sha256":"761743e95d8ebe80041c9679afd18599df86a9afb053d6dbba3452d27dbd79f4","sha512":"d46e0c44e8799bd3b283a3d92cf2d06988e998c6f9332ecb9ccac074370fce2e71719bc42f3d8380073e4dbfadf5ca8f0b45e90d40b223f3e00c0536631df595","ssdeep":"1536:A+RDl35kVfhRMGKHD+LxgnmeBDHYOo8LDgS9:rbSVfYEGmeBD7n9","tlshash":"a7532c987196787313d980f0a17b6743732a7d3aa94cc850d827d865367ce8a9233f7e","first_seen":"2026-06-16T09:36:41.625096Z","last_seen":"2026-06-18T19:24:11.042429Z","times_seen":3644,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":15,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:20.279Z","timestamp":1781798660279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-jFf3fx7vfD3dBFqelN29Av' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types JkfH9 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db877acbb9b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: tjxviaxk;dur=229473, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229473,"size_decoded":91046,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"64d913561ead01db4dbe7bdd29b4feb9","sha1":"fb6664ad424669e03f84e5efbca55b3bf2efd6cb","sha256":"a1b2980499e45d1d5e122c6b9f6ca35a92992428f8df1fea0e49df08b51d43b5","sha512":"fda1847ecd47dc99b7031c06baf3ccf03d011847eff7bf4b64b24489ca144fe3f947c8ae97f5f0ac3fd4ab44f8934e26978b74b6f4439527fc64dac61b21c0f3","ssdeep":"6144:aDCT+Pqyrhq4KVsuzQ0YYrPPQfbxKxzGEx:fTR3Jx","tlshash":"50243dce36ca705763916bb10077b9cbf23a5c941029182cd781aae0fcb675a739779c","first_seen":"2026-06-18T16:06:25.80731Z","last_seen":"2026-06-18T16:06:25.80731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/64cb809db4dcd785.css","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.454Z","timestamp":1781798666454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /64cb809db4dcd785.css HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5E4qW4KiyCkmqzSYys3Vn3Y%2BRSdlPDlPNb%2BQDsWcUI3GULNySzvezT%2FNzS5W6JODMWxX9rsXQnmqJp34jZAxtIbgfiw51AnN3ya%2FJB2Vtwf1gLvZ6EJCiu8IWmZaHsywD4k%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"f12ef104c3b25c730865f7ed5789c322\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db87a159f3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16973,"size_decoded":3986,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4867)","md5":"f12ef104c3b25c730865f7ed5789c322","sha1":"ba19c7054add04f0bf0e992a881527141eec062e","sha256":"0571062658eaf4268d877c454446432d81fb44585bc7efe0ebf01d4c8369601f","sha512":"6218a6e159f9a86b93a4512c4c4081e8f47d83ea4d5f96eae247ee578b0174a04ab1a4eb15fa30d8a84f7088ca2f9e4437a1ee6dc83304e5c5ae265a99ea6232","ssdeep":"384:SY6Rh6yXjZQmtVAYJQK1h/+SG5JZnWwrf7AZnp:OftpJVTDSJZWwrzAZnp","tlshash":"ed7235856360192793170e3297a18bb4eaa458c14bc3dff990c1edd4c2f6db913af296","first_seen":"2026-04-24T15:23:41.465528Z","last_seen":"2026-06-18T19:31:13.744995Z","times_seen":19,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/home_fast_desktop.mov","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.778Z","timestamp":1781798666778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /home_fast_desktop.mov HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FAH88TDFPPYcEyTqAqd6QKgsjeXeVQREYhA%2BqmQXPIuP%2B5JgXlXfHacsQfv%2BxQw0RbvNy79TbhozN5aASGwnKpCIUTHOR2e9sSOX29qHVexnsXmpjkqceUP2FAjPi%2F%2B4v0w%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0db87a36a4ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":530,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/hypernative-1.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.899Z","timestamp":1781798666899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /hypernative-1.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"bd032d84e7dd874f19808839ca4b8a7c\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbxWoDxuygdH2W0aWdUlgHts6TLa%2BhSR%2Fs4%2BDv%2B5aSo9rcJWeq49KK2qa7B4QjjLKrli3B0u8zd%2BJN%2BZxZJ6w3SpYTJyFb%2B5a6ws8IC4ZS3pdAlvQV9TJUpc2QMijhkYQ3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1766\r\ncf-ray: a0db87a42a7eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1766,"size_decoded":2482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd032d84e7dd874f19808839ca4b8a7c","sha1":"422e8c55fb35beb88b1da5b147a0f21e61fe6dee","sha256":"945cceaf66a6e82c7cf3bf882d876efa306a4c3d2ea0d7bf01702f46c0531be2","sha512":"3eddf98f194370872df01fcad21a1b337402c158d44ff1e6a950b905112db3336faa4db5370e4473362e62eaaab583f692f3d7f30ce81199d9d97741f416538d","ssdeep":"","tlshash":"43314dd284704388ae184625d37bdd48701c9e57747f8b3167e110444718f67b29f33b","first_seen":"2025-08-11T21:39:04.764994Z","last_seen":"2026-06-18T19:31:13.745565Z","times_seen":33,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/ankr-1-1.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.901Z","timestamp":1781798666901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /ankr-1-1.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"74a99529b73a19efaf2d7e028cda1c9b\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2B%2BlKbxjMzWoGE8RfTMw1otppjPguIdYaWR4PuytkOPoflMAwiuENC%2BronKX%2BbLFw8VbcLBifKHEnAg3zg0%2BhghdRazHAQ9G2dl36plNJdccdPra1duLPxZflJbwtKOMTGM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1504\r\ncf-ray: a0db87a42a80b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1504,"size_decoded":2216,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74a99529b73a19efaf2d7e028cda1c9b","sha1":"87f011fee23c56de730cb79b6ddf36a7f5ed92be","sha256":"794f63b21ecf0941b26436e18d536c830abcbf5332832baaa53821f95c5b87d8","sha512":"8c7a72c51cd3b350d1e0e8ca3de82da58be817b6603c47f6f5d62acefefa894dd69176cbd2f0179e8d1266bc40b7e4c0fdaf6ae0166f193449241f29856a779b","ssdeep":"","tlshash":"c331d78a3b637026e10c053831cc1122622048143a29bc23593fb4f80420691e5badab","first_seen":"2025-08-11T21:39:04.736165Z","last_seen":"2026-06-18T19:31:13.736772Z","times_seen":33,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/favicon.ico","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:28.186Z","timestamp":1781798668186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4la5GtpQ50sHTufEKOFGFahaa0l%2FHFCTyy9M2fBCV%2FvL7yvv%2Bz3XIVCy1na8%2B8Ci5fGvxntBlCNhPpurkHRhh8RaGQyDgpvp2%2FD1fuiAchyQkOdKD8lS2ea8D9hxr8qtehc%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:29 GMT\r\ndate: Thu, 18 Jun 2026 16:04:28 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 8\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=6,i=?0\r\ncf-ray: a0db87ac2c34b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3486,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-18T19:31:13.70531Z","times_seen":71,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/city_ori.webm","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.686Z","timestamp":1781798666686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /city_ori.webm HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"a51f5d83c91adbd04ed54a6b5479ea81\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ByAMqtjQxJ45EC%2BH0yu45ZYIePNyyLVqowOUpGmnamLWaT3UlYZ1BUNMsT5Va6M9bcNt%2F85mqRDO3mBAuP4%2BkluZ3rRIywSNg8pC8tttLtPheg%2Fxb5VYNty2e0sN4EdD7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a2ca2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262032,"size_decoded":262701,"mime_type":"video/webm","magic":"WebM","md5":"a51f5d83c91adbd04ed54a6b5479ea81","sha1":"bbc60e6eaa15ec3083c4e7dfddddfc52927d6be2","sha256":"63210defbb886035555e53410789cdc204909047a1aa139ccd2abfb78d20b0ba","sha512":"bba08f3a88d355eeaa622bb29f864057f71b6b16034f84d3acb4efde3b8fefc7491eb6f20777f8bc651709ac494f0423820f2dcf4210dbab68a7522d7d83e35d","ssdeep":"6144:rd9H6MksUSF1qtWswBcgN4+F/McVr7yZVArUdBMLbi4Acq:r3aMsSOQswjN/RMWHBrEBEbbHq","tlshash":"ce441211ccd6fa67d84c92f1b23e065e8494805fa523d3452db7f01ee67ab8de90a4b3","first_seen":"2025-10-21T19:21:03.381512Z","last_seen":"2026-06-18T19:31:13.709587Z","times_seen":25,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/mute-subtitle.vtt","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.689Z","timestamp":1781798666689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1kNjN365WLZN29EycuyFHByWyPMp7CxOsjcrzGEZzYfRw2HbmUSewiuKUi57ufoWI03o3bFN4H2La%2Fppwq0ObEcdHUwSUYSlk1TvYZp4xad884jCoiqmoJTthNZRsnHC6s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db87a2da31b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/vtt","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/home_secure_desktop.mov","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.781Z","timestamp":1781798666781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /home_secure_desktop.mov HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pDPlEL2eu7Ei4A4Tv2cgC1pMMT7ut6%2BO05UfuLHWHnLDkj5LMbPoezdBnSDv9YsjCTRou3ePVdHOdybUR1IynpjGwIa1HxFMcWZS9FKDyyPlbBUqXHuAe787L8IXmGpQkY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a36a4db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":522,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare.network/_next/image?url=%2Fapi%2Fmedia%2Ffile%2FLayerZero_Logo_Full%25201.png\u0026w=256\u0026q=75","fqdn":"flare.network","domain":"flare.network","tld":"network"},"ip":{"addr":"104.18.2.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.897Z","timestamp":1781798666897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flare.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 18:03:39 GMT","end":"Fri, 28 Aug 2026 19:03:19 GMT"},"fingerprint":{"sha1":"47:88:73:1C:C5:8C:7F:72:48:F5:86:52:5D:5A:F4:70:B0:E8:E7:E2","sha256":"5B:48:88:E3:A7:53:7C:1D:13:74:99:9E:60:33:D3:CC:4F:2C:01:E6:E6:72:E1:B9:AD:AE:1E:BF:FD:2B:82:93"}}},"request":{"raw":"GET /_next/image?url=%2Fapi%2Fmedia%2Ffile%2FLayerZero_Logo_Full%25201.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: flare.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1208\r\ncache-control: public, max-age=604800\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\nvary: Accept\r\ncritical-ch: Sec-CH-Prefers-Color-Scheme\r\nx-powered-by: Next.js, Payload\r\netag: WX3Dz4sij4FgxSfCx2XaEGgkDvWSo0dyJ1GA6oh9bTs\r\ncontent-disposition: attachment; filename=\"LayerZero_Logo_Full%201.webp\"; filename*=UTF-8''LayerZero_Logo_Full%25201.webp\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nvia: 1.1 google\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=UcoBqVORT.9wxYECxGtbQCV9VKmSwN2Lbu294WF5Lgc-1781798666.914593-1.0.1.1-2ORc9mwOm67_zY2axL55aOhkl8SfTeBZyXqVofHOE4O_lIJ7Ny99oO8.hDn4d6FKc9sQT7FclJAoRHDUoGwxpenQaTe28Zdoor6Z7XWk.Xnk582TmQNt1Hrd3qNScz.T; HttpOnly; SameSite=None; Secure; Path=/; Domain=flare.network; Expires=Thu, 18 Jun 2026 16:34:26 GMT\r\nage: 112544\r\nexpires: Thu, 25 Jun 2026 16:04:26 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a0db87a43edd5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1208,"size_decoded":2514,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57a6e0ccc397ea7b740a6e0405bba3b5","sha1":"3cbac7d5fa1419b3c61f66c311b3eee7b9eff85f","sha256":"597dc3cf8b228f8160c527c2c765da1068240ef592a34772275180ea887d6d3b","sha512":"61719d11d2ddf9c20278344f009366debeeba583705f33c9fb1b95c9b627ee62c33a662c261180173bfdae490d645c623029c801b9f96db288612a43d9326ae3","ssdeep":"","tlshash":"5021b45503021db0c8dcffe059c2685fa17be5f91300ac195740b0a82ad41bee4ff82e","first_seen":"2025-08-11T21:39:04.775323Z","last_seen":"2026-06-18T19:31:13.708874Z","times_seen":29,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":14,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/quicknode%2520logo.webp","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.905Z","timestamp":1781798666905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /quicknode%2520logo.webp HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcsaXnZmpkZLoFz6HQ9q3nd9LKjQkG6Azr4Qr8LIumgUqP%2FRD1M5ZTFDeFBj7nFHhowLdMdAn6IQvdlFyYazOXIa%2FN%2Bfsa0qsYlp%2FHWUqKJRGfQ8nWZMRRFKupId5rb1RHg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a42a85b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":552,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/home_fast_desktop.webm","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:27.000Z","timestamp":1781798667000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /home_fast_desktop.webm HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"93f55c45880ded591da9582c8da247b2\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FrPnfNOT4gO6AUw%2BW38dF18r8ipE%2By8JH77dCNu0YVYkp9EAdlsYI6Zajl9pPWqYvBXHHbEfjvPKMT5gyC3HucLuj8m%2Boi61EyHqEDnS9hJjjiOoYi3DFVo0JAFf%2B%2BdXaIg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a4cab9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378641,"size_decoded":1379314,"mime_type":"video/webm","magic":"WebM","md5":"9a5fba883369cf25fcd3de86facd08b1","sha1":"0aa0f6141f01d5a4bf827532aab3e029a30f2ed9","sha256":"c10dcb1ac941eb67789e362664821756ad38f30107d147897daa06deee62c45d","sha512":"5c514cb7b02b4f4aae4939f44af686286fb7e1470e4339c60da0a269857ff3f9fe143e8f6cf4763bd8710ac22ec30d776337a4c718c5b428ae6e39c6efe6002e","ssdeep":"24576:3p/jOrSWT9ihDPOxGvbRNI/86ocsvDBIylxy2+6LL+:3pbOmj5uGvbRPcsvzxy1V","tlshash":"f925332e2abc2c906fa5d17ef1b95c257d7be221687de42a3c1931c791094fac1143ab","first_seen":"2025-08-11T21:39:04.776649Z","last_seen":"2026-06-18T19:31:13.748289Z","times_seen":27,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/ibm_plex_mono_v20_latin_regular-s.p.e1d6b3bf.woff2","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:27.054Z","timestamp":1781798667054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /ibm_plex_mono_v20_latin_regular-s.p.e1d6b3bf.woff2 HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"79936b18df9f734fb6b0a256b20d36b4\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPH3u9Id93LAaAHnkAVBfutl1UEzSmDQadMEbBuXQoOfTBZbEIINPBwwMe6Ttj1LS12gkVw9hLpPJTHAN%2FRpBdFTjeVD0hWg4JElxXGJCTi6Tcd7mq0RVhpH8WaHgoARvSE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87a51acab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14708,"size_decoded":15371,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-06-18T19:31:13.726585Z","times_seen":2231,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/favicon.ico","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:19.926Z","timestamp":1781798659926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2flare.com/?__cf_chl_rt_tk=Gzk3vQZSKT6u.kRXtXW4LMbSlZ1Ew6_UaLioH_w1zyw-1781798659-1.0.1.1-OdrP9wUxTIVtSQ__xkXzjZaKxCiw2NIGWjywCmeV3Jw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLWIsvUTuLrKasPzUQbsXRgq4Qo%2BoGIeBaYwQjqBUJem4Z4xbvKRNu3ZLx7pm7dHXcye3qZ0WT65e4QSUvMMEyxY3RdV6XOt6I3ww%2FtAFFtbdE2NMYNZvSCDPnOKeYsffRw%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:29 GMT\r\ndate: Thu, 18 Jun 2026 16:04:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=6,i=?0\r\ncf-ray: a0db87788916b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3507,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-18T19:31:13.70531Z","times_seen":71,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/d5170cc3037aa5ea.css","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.451Z","timestamp":1781798666451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /d5170cc3037aa5ea.css HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4s7GJ0S72dnjEEN%2FxcwBGLyc69%2Fx43B8eiSyMOs0%2BH79IoV5%2B9ekY0ivjtSmMx62kBH54pGAu3%2BGs%2Fe6mKhGi2wJ58McCwyVgvWzGGlUQ146RTX07U97o0CTQGKqMswM2g%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"476e8950a1e70e093e13ef6cc4d9b5cb\"\r\ncf-ray: a0db87a159f1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3737,"size_decoded":1733,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3736)","md5":"476e8950a1e70e093e13ef6cc4d9b5cb","sha1":"1032f7332b6bbd9ab2f40a9b6b6c9f25c95948e0","sha256":"544a2d4c3c7dd9d002fbc661ad37e3bea8e4e2a8726a3157eb6041a3660bd0df","sha512":"38690ab286c3973e363a3ad99f94b05656251fe92ef482cf614ca233f23695b9587bc0c3d76ed0474f920ffdff97db2cedab032fae5e4d1a2f05f12b6b325452","ssdeep":"","tlshash":"ab71bf73ea35e028f2268d573782755e17089876649787b5ee33ed0dc8e37b31212b08","first_seen":"2026-04-24T15:23:41.471553Z","last_seen":"2026-06-18T19:31:13.735705Z","times_seen":19,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/mute-subtitle.vtt","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.786Z","timestamp":1781798666786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3v85lbA1syQDxfwNWfqwL268fsErZE6KnvyhPqwIuWIpINhHpIFy%2FDNWsxgNH8mx%2Bc4kMHGpr%2FDwK9P88Ahqp5AgRThVNIHtNMdBs2u1lF6ELAn9O5rqkFS%2BLhCKyeXSCnE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db87a36a51b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":746,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-18T19:31:13.711079Z","times_seen":15,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/Satoshi_Variable-s.p.fc536e90.woff2","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.991Z","timestamp":1781798666991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /Satoshi_Variable-s.p.fc536e90.woff2 HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"70880e42f07b0386e261974cd14820a1\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v64RO0MJIJLPL%2FHzlXfqXeLIsomBQ0LUeLw5O9wIAwJsPZnquoFdjL%2FFHCJDQOtatPkFBz1klHI4Xipar65yI4n66qIF1MrBGk9rZ9T%2BbFPodKia6pRdT%2FJVoFNVL7BmTLc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 42588\r\ncf-ray: a0db87a4bab6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42588,"size_decoded":43302,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42588, version 1.0","md5":"70880e42f07b0386e261974cd14820a1","sha1":"2d34d398b398a7fd88d21fae7642cdca908bf3ee","sha256":"e739aff9b4d02c264341d6d4872edcda28e79373aeda936f659566a1cd3eb47f","sha512":"6a5cb0cbee5f49a4b96df82bc37f3f2aa7abbc8fdb304962a3f492c7f63772b81e753a86e01da2a7a74785cf3196795408065e0bf30695166311e324d813d83c","ssdeep":"768:LRuvvUK4d5TnqQ8Wd3PDjhbDERazTlYv2zypgb0Sj0a7OpBUroBTy1gvK2jbx:9ukK4rzn3PPeRElO6ZVj0a7O/3g1IZx","tlshash":"d313013c8972d7b2bddb203b7cc0b6652494576962b0b2bec096093c80a467db18f733","first_seen":"2023-06-27T05:49:32Z","last_seen":"2026-06-18T19:31:13.707234Z","times_seen":2209,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/3410790414:1781795227:ChO0fcuzUFOZzQEiojKphWQ8yM5nVezOVMpGYDd_bv0/a0db8776f84db1b8/PdTYWz9mITSXatCR92Xz9CW82hLa2QlBrgcSlTxu_NI-1781798659-1.2.1.1-E8ty6Ch45TGnDurt7z5YQMDuoyJFRsXavs2gUW6iEWICZ9WZqPhLE_bQ_ley76LU","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:20.206Z","timestamp":1781798660206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/3410790414:1781795227:ChO0fcuzUFOZzQEiojKphWQ8yM5nVezOVMpGYDd_bv0/a0db8776f84db1b8/PdTYWz9mITSXatCR92Xz9CW82hLa2QlBrgcSlTxu_NI-1781798659-1.2.1.1-E8ty6Ch45TGnDurt7z5YQMDuoyJFRsXavs2gUW6iEWICZ9WZqPhLE_bQ_ley76LU HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2flare.com/\r\ncf-chl: PdTYWz9mITSXatCR92Xz9CW82hLa2QlBrgcSlTxu_NI-1781798659-1.2.1.1-E8ty6Ch45TGnDurt7z5YQMDuoyJFRsXavs2gUW6iEWICZ9WZqPhLE_bQ_ley76LU\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2263\r\nOrigin: https://phase2flare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: Z+agTuXzOdDglOkTJ/wTMJYIpDm8TVf1fOt6VjNBbi4=$c1yMeQy3mvr8+zr6Ap6n4A==\r\ntiming-allow-origin: https://phase2flare.com\r\ncontent-encoding: zstd\r\ndate: Thu, 18 Jun 2026 16:04:20 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0db877a49bcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22072,"size_decoded":17003,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (22072), with no line terminators","md5":"afab6196f49745632481707ff34fe707","sha1":"e46f6f7a8671b18bfce2f3cff31450b7bbfb668c","sha256":"0be460481ccde80378abe853b3c876a3a93cf4829e2a1e42e97460f89abac3f9","sha512":"19c4ca3b8dc467aaea3ee4ba44a74df1d39d3177afbeb5f330272d9eaa580fd4aaaded1830111eb74283ddabffd9d534a749b1af1cfd5514826a86cdf17e6383","ssdeep":"384:TrrVugcU8qzt42HHvrYeDZiavv5ng20iif8y+OyvtTi6g2bU18UAXECQJV/Io0sp:/RufU8y42HDVZlg27ztI6g24tAXEPF7","tlshash":"8aa2d0850c4177da5a742ecff2f81a74d7401b28ab19a640f3e7e0d981ec95bd15a3e8","first_seen":"2026-06-18T16:06:25.81445Z","last_seen":"2026-06-18T16:06:25.81445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a0db877acbb9b521/1781798660681/HYZYSbEH9_voZJJ","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:21.015Z","timestamp":1781798661015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a0db877acbb9b521/1781798660681/HYZYSbEH9_voZJJ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 304\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a0db877f585db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304,"size_decoded":524,"mime_type":"image/png","magic":"PNG image data, 13 x 16, 8-bit grayscale, non-interlaced","md5":"2263d8658411ba26710b4a6de9b2bbe3","sha1":"9cf9eb8a0a56a07965a7d2a8b42f28a87a68e9b9","sha256":"a0d161c3fdc973343c037ba41c671a19a37418e330c631261a97e4e3847cadfb","sha512":"56d53211e5495e0dc4d985959006082a9c1106806ac0c936a8f4a4c739729914f00c8bad2e81f84127254555fca297253b37ed02989ab4f988210933a84e4566","ssdeep":"","tlshash":"3be012e6b2145d34c34a023a03240520c415000c022249240007941d05105cc41c4b51","first_seen":"2026-06-18T16:06:25.815469Z","last_seen":"2026-06-18T16:06:25.815469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db877acbb9b521/7YC8eVymZbnIaFHtdbC7BPbU4KLkKYGgzaKp7c_QYyA-1781798660-1.2.1.1-IO9dqSQFIOdV183R9jKlkr5pjDpjelzB_DwHvIo1cUFuh0BIUO1dkPbOMj4.X5ZH","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:22.192Z","timestamp":1781798662192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db877acbb9b521/7YC8eVymZbnIaFHtdbC7BPbU4KLkKYGgzaKp7c_QYyA-1781798660-1.2.1.1-IO9dqSQFIOdV183R9jKlkr5pjDpjelzB_DwHvIo1cUFuh0BIUO1dkPbOMj4.X5ZH HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/zbinv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 7YC8eVymZbnIaFHtdbC7BPbU4KLkKYGgzaKp7c_QYyA-1781798660-1.2.1.1-IO9dqSQFIOdV183R9jKlkr5pjDpjelzB_DwHvIo1cUFuh0BIUO1dkPbOMj4.X5ZH\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 87266\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:22 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: +8wzx3yQt9hsn5tOpZmSEvKZcMxkCwsYXVAvARQTHqyTPqvropVndIhx2WMA+jtD$DZGSPmhhZ/KppGtzi3Z0xg==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db8786b812b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38716,"size_decoded":29525,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (38716), with no line terminators","md5":"083797e0381de2e00b0a79dce560ceb3","sha1":"80488ff989bdc2739efe5ddb9c29e45453f1660c","sha256":"72699d334a2bb7d7aadea4565b031334c4e65f652a26ca8a24da87d7f7813cec","sha512":"783edffae99176e9e1b55ea642be358a5911616c488706c7c2d4fae8300a85ace3a73ddb3fbf15c0cf86593a32e471b611253668595b7cb875a12d1e84fcea9a","ssdeep":"768:/kCRrmxzsaQcg2VyPSpx1zPzRKi+jwLvRwJLEc07QyrSO4OjFY1dUOXFr:/Z9mNsabyPuzz4ijzRwJ/0sV1dHFr","tlshash":"5e03f10a5f361c7e16326acdb5143a5cba9357ac0893c2d0fbe1660eb290677f97428c","first_seen":"2026-06-18T16:06:25.816447Z","last_seen":"2026-06-18T16:06:25.816447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/29d75789b264c294.css","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.448Z","timestamp":1781798666448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /29d75789b264c294.css HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVP4dfdO97z%2B%2FLwDXC6%2B61Rz1jef0a1x%2BVrV6y3VzhZxbw1qNNUqmd05spG5DiBymUlyX07X7ZQH84ScGWfi4Xw6KLm24nB9Yv3P6C71Mtk%2FOHGDM4%2F0%2Bx2eypah3jdj5Ec%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1d3620097efe3fa54b3134ec2dfd8bb9\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db87a159eeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111154,"size_decoded":14369,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (16853)","md5":"1d3620097efe3fa54b3134ec2dfd8bb9","sha1":"889505bb1e1035b9eb4f939b3a447507fc6f5d3a","sha256":"70fe002679e725bb0c0a3b935f68ac7a20378ab2a67c72860caf951dfe04d5d8","sha512":"ca395ebfdbb9425e8bb03cc442667fe8319f04490ce3c98e38ffcd2c34ee9214eac8441071c8110811b65032f405ef97e7e78d3c2ef0df2e0482afe3e6af459a","ssdeep":"768:KWeCQlBkIapPd6GvZbpyFV7vYyafVcVVyN1HQtlmsbmHDmxHC8hjg+8eItV25uXn:KbliIapPd6GvrtfVccids","tlshash":"56b30e13b6f5137fa05d244af6915804efd074ebf2ca9fe0940edce588899a226f174b","first_seen":"2026-06-18T15:59:02.815377Z","last_seen":"2026-06-18T19:31:13.728598Z","times_seen":12,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/b85a5d1553cdf244.css","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.450Z","timestamp":1781798666450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /b85a5d1553cdf244.css HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F0wUzZqMGtrdka7nIph2MAtCMvsM5AHG7paDwN95tJjIW%2FCiRersh3KkmpjkdfSWKT1OM%2BKfl43vqwLn2BBglS%2FdmgnPeiyC9skQgTmhHRZDpaLxXz9a1wc8VUgcd%2BgMmqA%3D\"}]}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"0544206cae8203dbe2bddff0ed234f11\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db87a159f0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78271,"size_decoded":11107,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11983)","md5":"0544206cae8203dbe2bddff0ed234f11","sha1":"eada2197163e4de60dbb7f5900849c8540544d62","sha256":"7a79c352410f825d5b1cd1b60d0611257038a32dd280fc5b13869edaaf097e05","sha512":"fe89823d5122a5be72cd040028d0f9d3217d3ff4a6649eb067d4ae9fab81dd0410155d0d67866e3422edff832985bb3e27c8462e995e01384d45f568b2531228","ssdeep":"384:XeUw08ZHQlDjjNQDdUgLpOy5vIdSJaCaJCrm74FW9BDkKcKphgyoUhDcJH+GldYg:QZwlDjjODJ5gcrq4+p/CGMUxG","tlshash":"0a73fe57b5f1132fd02e2052f1c25c48dfc4b0dbf1899fd0650e9dea429aab266f1b86","first_seen":"2026-06-18T15:59:02.817561Z","last_seen":"2026-06-18T19:31:13.747334Z","times_seen":12,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/Flare.svg","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.636Z","timestamp":1781798666636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /Flare.svg HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2flare.com/\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwEd2QGdyh%2FvMe%2FVsUKTGMO5mU7YVgSgdVJn%2BVamTvB9rrVXA0FN7mKBnTpPuumgfqnprrVWZ6FhQguNwFAUSvTJ%2BEla0RCYUz6loB7t3N9ZQqtCTNoEbQeYrizXgG64cD8%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"595f973187a90d91245e6adbd03e6f78\"\r\ncf-ray: a0db87a27a25b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":1158,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595f973187a90d91245e6adbd03e6f78","sha1":"84cf19963d52368852d083a4377e2359d57f5db7","sha256":"b32962a5e4467193bb585ce81d604de083405dba639e7a32154dc39958b50cf1","sha512":"1507e4cc3a19a71943ae16bb68b5cd34a8522f1e2712c770b9f3ddd7a52ae6c42788f9450cfad59fa9b741cbccf15592e5f248f56df154614600dc7e0219c57f","ssdeep":"","tlshash":"bb1100e423ad82c4f906d3300aab787321873dfb49534b98e0812d14d60b46edc35f48","first_seen":"2025-08-11T21:39:04.753608Z","last_seen":"2026-06-18T19:31:13.746793Z","times_seen":34,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/mute-subtitle.vtt","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.784Z","timestamp":1781798666784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfDB1tuKl0BzLmaJAdRYOJnJcj74%2BVHhjAxpbcKAbQGlUkv2de25tuX0DCBsfHng%2Fum9dzwCy5%2FbSs%2B5ztf73sCAvtNrDfbDSY23pi7mlsbIkGOgKbn1a4uloBu2oDkFwxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db87a36a4eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":746,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-18T19:31:13.711079Z","times_seen":15,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/mute-subtitle.vtt","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2flare.com/","date":"2026-06-18T16:04:26.785Z","timestamp":1781798666785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMCoEROxB2b5utTmqpPNQRyR4V4K%2B92CooQ9XVulVIP0CyyUOCOdT7Tp7UKZKKh32LBrQgHsmbbWBxvCFO76O0UK%2FELt%2BOl0XASRwrLy3Ve0xDcwZ4K4qv7c5mnuCJ3uGMA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db87a36a50b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":744,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-18T19:31:13.711079Z","times_seen":15,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T16:04:19.623Z","timestamp":1781798659623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-bO3CjEnvuRjgiug77j9mwg' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0db8776f84db1b8\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkpWl39nHf7AyK51arGM%2BdayjsDCFHMM2Zq%2BQT88VLb%2FqzZ61zadRSu4%2BvQ7PbsG8PKBtvi1KDvzgobRURR1Xmt%2BGqc2aCQxbXZO8n%2Bbur9kXv6UjAsY36NPUZPSGzdsFLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 18 Jun 2026 16:04:19 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a0db8776f84db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5576,"size_decoded":5546,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5576), with no line terminators","md5":"4f000b38e66f9b0d459fe10d360dfcf4","sha1":"32a5a01abee37fb921b0b73d79a08fbe507e8484","sha256":"9108fcf8b15300645b9bc3bd6a704397e1dd5f0f598421a1dccd44c72586aa11","sha512":"a0bb680f38bac022f63020accc1c85a2a8d9d28926bd0895ea51c2ec6abf79ee1b20c853670466a1098835782e2bcf1b1f6bf6addf4476cca37ea247dd1c7fc8","ssdeep":"96:PNyAotoXZzIEb0EaW873TFLngMQ+LbfV1Doq6RLVpdnbK+Yzueh8fhmw:PNItkCB9gD+LbfVWq6BVpdnWDyBkw","tlshash":"dab14ae7a531013793b63beb10f1736c922174657f098096c8a0a6eee6ded9b8169c84","first_seen":"2026-06-18T16:06:25.819222Z","last_seen":"2026-06-18T16:06:25.819222Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":31,"connect":14,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2flare.com/","fqdn":"phase2flare.com","domain":"phase2flare.com","tld":"com"},"ip":{"addr":"104.21.14.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T16:04:25.966Z","timestamp":1781798665966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2flare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 11:51:06 GMT","end":"Sat, 05 Sep 2026 12:49:57 GMT"},"fingerprint":{"sha1":"A6:F4:E0:0F:B0:A0:AB:4E:76:BD:FA:13:9B:88:21:B5:F9:33:2B:B3","sha256":"4C:14:03:BE:F1:BB:0F:14:9B:6C:37:BB:34:AD:44:22:ED:22:09:D3:8C:14:46:55:0A:BB:93:3F:6F:C1:8B:36"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: phase2flare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2flare.com/?__cf_chl_tk=Gzk3vQZSKT6u.kRXtXW4LMbSlZ1Ew6_UaLioH_w1zyw-1781798659-1.0.1.1-OdrP9wUxTIVtSQ__xkXzjZaKxCiw2NIGWjywCmeV3Jw\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://phase2flare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=ybCFn9bWO.HqBGXhn9q8Q6bnV7s_6Y7B1rs2HcioDxk-1781798665-1.2.1.1-wJwkVzgJuZIYLUxkNV_OsJZGkfwpahxepxrwGsddn4lKMQ0k1GBMWZE485mDs4Vw64aj65_UCoG6k5cG6Zc1HTZ2K_qgyNqtmcaPpeejVaOz_1GDAIYpr.orZAadxObSX1AAPKc_0HLAVCkvca5XQF1Ynp28D2cIbKWojgTzh4W00v694H_Nn10DTEFiTxWYAZPrkF9ux_zh2hXJFAUTaSs3UWwLS41gVHjskYJD6vqEvc8fP0Qo6F7fPD_Y95Bwm1huq5ANEl_pINJrkAKFaUyLLFPY57yVRiNi2a7zF_mi5L0hz1X3fNP5mP_ZorkqrhCKeKpfSoCPKhb6IhlCyRty4xuFaxW6kBwEiZsNgSerseRlUsdvpkQnlI10GOgJExmcc_iytDzxhw0Z_FtYmCBtjlzB.pWpkPpskRmbaGkQAIM.TN0YrORoQCKiGr9kxW7FUXFdMDOr3cUtHjFDYeRoibh7BTanQydIJlnBQLBetEft.wl36IhvCpr12fX9\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Sun, 07 Jun 2026 12:49:28 GMT\r\ndate: Thu, 18 Jun 2026 16:04:26 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHiAs9Kd5RPBUDm7yQ3o60F41h8CuVBvQEGK9owfjXgn5hY4RdgOzSI84CsYRW8dUFBy72YgzCKNlt1toItzNDx%2Fu9E62%2FKcYpPqtNvZ%2B6jL4l%2BXibFCoOseycWyIXInN1w%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db879e497db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377491,"size_decoded":54160,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5915)","md5":"03be786a2e9dfc0ee8fe7368aa2fddbb","sha1":"d51caddd549e7df8969197599906bc5250f613c1","sha256":"6ff9c76bbabac6d06163c357bd2b147f073cad911f4b7528619ec16a07c88abb","sha512":"9795a6c0758a9f7b22de49a4ca7b38864e3ae1c62d5cf0722d1d777394fb35004f9159c16bdbf603ec3e21c7b27fd6f9a1bbe91adbc1cf447f12a48ddf19b55e","ssdeep":"1536:1XEnhvo5s9TwECJG41icdCRej8CJy1icGC5Y2LSHgxJn2RGa4bLPjoMyQHkeSFe3:18vo5sgGebKS454nxG","tlshash":"e184d9a2f3f112e7401e43e8e9765506efd060f7d1468e8c729c6af85f46c9c68d268e","first_seen":"2026-06-18T16:06:18.842792Z","last_seen":"2026-06-18T16:06:25.820295Z","times_seen":2,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2flare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}