{"report_id":"87e36746-4892-4694-a873-f090b7979915","version":6,"status":"done","tags":[],"date":"2025-02-25T20:13:07Z","url":{"schema":"http","addr":"www.warez-bb.org/login.php?redirect=viewforum.php\u0026f=15\u0026start=0","fqdn":"www.warez-bb.org","domain":"warez-bb.org","tld":"org"},"ip":{"addr":"103.224.182.238","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"title":"Cloudflare | Web Performance \u0026 Security"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-05-06T20:13:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"xml.ezmob.com","ip":{"addr":"198.134.116.18","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2004-03-16","domain_rank":44484,"first_seen":"2014-12-16T23:57:16Z","last_seen":"2025-02-19T23:55:25.668953Z","alert_count":0,"request_count":1,"received_data":377,"sent_data":570,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nextpointkaynersave.com","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-05","domain_rank":0,"first_seen":"2025-02-05T18:17:58.212403Z","last_seen":"2025-02-23T09:18:30.365873Z","alert_count":10,"request_count":10,"received_data":73245,"sent_data":6014,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dash.cloudflare.com","ip":{"addr":"104.17.110.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":194042,"first_seen":"2018-05-11T09:39:28Z","last_seen":"2025-02-18T10:18:00.2011Z","alert_count":0,"request_count":2,"received_data":14607,"sent_data":908,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.warez-bb.org","ip":{"addr":"103.224.182.238","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2022-06-11","domain_rank":505404,"first_seen":"2012-06-02T11:10:41Z","last_seen":"2025-02-05T06:29:24.962336Z","alert_count":0,"request_count":1,"received_data":331,"sent_data":528,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww38.warez-bb.org","ip":{"addr":"76.223.26.96","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-06-11","domain_rank":0,"first_seen":"2022-07-15T04:33:36Z","last_seen":"2025-02-25T20:11:56.300311Z","alert_count":0,"request_count":5,"received_data":3899,"sent_data":2811,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d38psrni17bvxu.cloudfront.net","ip":{"addr":"54.230.241.226","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-09-22T18:48:38Z","last_seen":"2025-02-19T07:52:36.90399Z","alert_count":0,"request_count":1,"received_data":943,"sent_data":350,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lycur-trd.com","ip":{"addr":"35.153.58.125","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2024-12-23","domain_rank":0,"first_seen":"2025-01-27T19:26:58.815551Z","last_seen":"2025-02-19T23:55:25.592172Z","alert_count":0,"request_count":2,"received_data":3972,"sent_data":1511,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc3bf4ccb65b532799b12396dbbd6e4e","sha1":"c1726ff18f1797ec20f8d22494cb3e3e44eeca47","sha256":"2a5ab22b3e368ae6ad99904865f55f4dbd4a0c2af2eb5815e0867bb972eb1f5f","sha512":"b72335b9d4f25f46853b84812eaef11b1437377c134605e6393cbbc4aa02e4a2828e78790fde3a3bff368b1d6c9206695af0128cd262c6b0fdd0d9e684718261","ssdeep":"","tlshash":"09e08cba51a5052294f72b7d2e8aa6903a3380a390b87d507e9d8224af64d5f1350eca","size":349,"data":"","first_seen":"2023-06-29T03:08:22Z","last_seen":"2025-11-25T15:58:03.772134Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"650271701aac4b99437df01af67e8402","sha1":"288dab84825266e3bf5f74ea887f5220956cd399","sha256":"93e079b8273246aee256e5ef579c73c6348666fa5bc702221ba2ee076f80751f","sha512":"99e71a5cbd2b7c1042942a3c16aa834dbbe3452e633c84b330b09b488a0b8d2ba365839ed1103b8cf7a1d52fc53cbf436e8bfd76a0c92328ab8158a4d0d4af3a","ssdeep":"","tlshash":"f44182010df3183e06cb14e412f7d78ee1752018e71ab5e17a8948e017a5f9de0a5e89","size":2190,"data":"","first_seen":"2025-01-27T19:27:00.85778Z","last_seen":"2025-03-14T03:49:52.405776Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d7277450d65e1acffc12273b5a76eab","sha1":"2803f14bbc2fc86bb52bbc9a97b89485a35ca422","sha256":"d2dabc8652fd169ad1af9378b660221daed109ba518b8d5d0e730f3ec17c516c","sha512":"98c0c87ed9cc56bb6d7cac5f673c6ec149cd906b98f105e6a7035a4e55c6301456d5c45d21f281f531b0ba472bfd9245a920c46fe31cc991460b348744ce2626","ssdeep":"","tlshash":"49d02baa2d3d85316769014f21b7f3e82522696156269a40d1ddcc261a10fd358b1458","size":264,"data":"","first_seen":"2025-01-27T19:27:00.858721Z","last_seen":"2025-03-14T03:49:52.410038Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a3157df84574c7db4e6452e8d99d3f6","sha1":"4cc8720cfd1f4cab01724b5c0002060659d50f72","sha256":"7ced21ea74954a0e9018eb4492acf135ca5ef6224b817c5f0812532786eeb565","sha512":"ca011e41ef89fd9eb643fa891e3f5419e2d753fbaaa30b03c1a686d4ff582a8b5da9a16a83267c4f36dfdea1dfe4cf02a122ba15b337d1e8d3de0c139c4749da","ssdeep":"","tlshash":"3f8000a82000a08000332c30233baa083ba2020230c3380b0a2c80ea3eb880bc8cbecc","size":34,"data":"","first_seen":"2024-07-11T09:37:32Z","last_seen":"2026-04-05T14:17:59.468554Z","times_seen":15949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71748571baf4ad9e6004de735d819dd8","sha1":"a8957bb520d7c6a449860943802d7d41c111202d","sha256":"fac4a4431ad806c05bc1808d9167f5c167c9ea2fd0f00007a151f8e4cc185f41","sha512":"6353b4255e5771ab9a6eac3395ef379d1e064bf39af85291edf7e8784dab4365cdd21cc050e7d1131a3c097690dcb8bdf9fbfe66b8def37b83168a8f41503794","ssdeep":"","tlshash":"5cc04c6c1a182a7c101a3cfa913be4c7b3e3918b99c35021f306c1719db5eada44c6f8","size":174,"data":"","first_seen":"2024-10-03T02:29:40Z","last_seen":"2025-03-14T03:49:52.407137Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c18432c4f2ad065b4f66d2689c5ad12","sha1":"6024674defab21643a102a22662f45e4e998946b","sha256":"d95c46bade1dd520248ae7240c55ca68461904141b058b36a3c90cb2175c6b2f","sha512":"6a05e3e9acaf9ea4444de701dd274a873bbc9e267d8ca281d1f7e256dc0cd692fb93fadfc493faade8ee65d819c8e2013f5bbf452dfc445ae5d5235c0e757378","ssdeep":"192:wwJ5e7N/UgrqNgtFngrlrTEXwi4Y1N2nEyFI+nQxanGiikOx:wTcSqESFTEgi93AxOeIaM","tlshash":"f102f9c6768abc4102761c9628aba577741fbe612cf94f234403d8f8b6707c4946fe26","size":8451,"data":"","first_seen":"2025-02-25T20:13:09.011149Z","last_seen":"2025-02-25T20:13:09.011149Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34ad0a116707d3b794129a6720af92d7","sha1":"424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4","sha256":"d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262","sha512":"4d7cca00f0d83452fe3513c0c07c97ca5318dfcda0937df40626e49c9e15ef9a4287e6aa98da4c873d46248a20418b0ef793704c6619efad43c8b338a515cb37","ssdeep":"","tlshash":"43e0226b3b45293456f7aab3337fe37c3a22e0969cc015201968cd5ccd2bac042352c4","size":393,"data":"","first_seen":"2023-04-05T04:39:40Z","last_seen":"2025-03-02T06:13:46.994369Z","times_seen":143291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f658ddd9442aae43644636b2b025089c","sha1":"ae07c3a6e9cd5a85e3438c42e107b3128c03d5cb","sha256":"485cdd259996ef1e6dc23fe8d65e32588b91e1513874ca1c242f44734eb23448","sha512":"1b2a5a27fd32eaaee84864088a934ae9a349260916691c62d474561e8560e2cb82cf98aeb844d1e1b03d2fb29cba8b6b533400510e05d1ab42acb3afda1f78e8","ssdeep":"","tlshash":"4eb0126c25d02a3a4af7b82c706bc3947b334043310a1533b9bcd2840f26e810171bce","size":120,"data":"","first_seen":"2024-10-03T02:29:40Z","last_seen":"2025-03-14T03:49:52.407836Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96775fec8c1b4d07c6def9fddc11b5dd","sha1":"fbce9748d47aa1b2543a9bce98bb3314cd3730c5","sha256":"62a9793de19de480214f96af6189c2851c9731e58ec77d0e681c33c851a4eafa","sha512":"7746cb55b006dda555d479bc96ad60641b9185f359cd7d5808c301b2f46f819b1ba3bd21abd6945255da84e6b271ac84df559568d5b0370495e150532ca94778","ssdeep":"","tlshash":"b241287568f39013a609729e566ed3f17ee55c03111c9dbb79afc0166f40ba8c1ab2f0","size":1881,"data":"","first_seen":"2024-10-03T02:29:42Z","last_seen":"2025-03-14T03:49:52.408649Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a3157df84574c7db4e6452e8d99d3f6","sha1":"4cc8720cfd1f4cab01724b5c0002060659d50f72","sha256":"7ced21ea74954a0e9018eb4492acf135ca5ef6224b817c5f0812532786eeb565","sha512":"ca011e41ef89fd9eb643fa891e3f5419e2d753fbaaa30b03c1a686d4ff582a8b5da9a16a83267c4f36dfdea1dfe4cf02a122ba15b337d1e8d3de0c139c4749da","ssdeep":"","tlshash":"fe8004541000504000331c30133755043751110130c33c07051c40d53ff4407c4c7dcc","size":34,"data":"","first_seen":"2024-07-11T09:37:32Z","last_seen":"2026-04-05T14:17:59.468554Z","times_seen":15949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4835df1f202ed8ddcef91aa6b2645d92","sha1":"4226a879634f8e99d50ce19548f7a082c0efbb06","sha256":"c42ca7da40e1e470dc6fd66e64a32b23ad6900aad22617646d37fc91128819cf","sha512":"8e6235f0e759b9eb3bea63bca565de1edd83e6374b141e7a551bff306caf01f23240c7264db02319c2ab27400c994517591f916268f9926343204c5c9f2e59bf","ssdeep":"","tlshash":"c811ceb93e2e65348a96414b317ef7a93d3260716a129584c2adcc245958ec314aecbe","size":988,"data":"","first_seen":"2025-01-27T19:27:00.863194Z","last_seen":"2025-03-14T03:49:52.409353Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"www.warez-bb.org/login.php?redirect=viewforum.php\u0026f=15\u0026start=0","fqdn":"www.warez-bb.org","domain":"warez-bb.org","tld":"org"},"ip":{"addr":"103.224.182.238","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:12:37.781043467Z","timestamp":1740514357781,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /login.php?redirect=viewforum.php\u0026f=15\u0026start=0 HTTP/1.1\r\nHost: www.warez-bb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Tue, 25 Feb 2025 20:12:37 GMT\r\nserver: Apache\r\nset-cookie: __tad=1740514357.8704813; expires=Fri, 23-Feb-2035 20:12:37 GMT; Max-Age=315360000\r\nlocation: http://ww38.warez-bb.org/login.php?redirect=viewforum.php\u0026f=15\u0026start=0\r\ncontent-length: 2\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e1c06d85ae7b8b032bef47e42e4c08f9","sha1":"71853c6197a6a7f222db0f1978c7cb232b87c5ee","sha256":"75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070","sha512":"016ba8c4cfde65af99cb5fa8b8a37e2eb73f481b3ae34991666df2e04feb6c038666ebd1ec2b6f623967756033c702dde5f423f7d47ab6ed1827ff53783731f7","ssdeep":"","tlshash":"c710000000000000000000000000000000300000000000000000003000000000000000","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-04-05T13:23:17.702369Z","times_seen":39486,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.warez-bb.org/login.php?redirect=viewforum.php\u0026f=15\u0026start=0","fqdn":"ww38.warez-bb.org","domain":"warez-bb.org","tld":"org"},"ip":{"addr":"76.223.26.96","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:12:38.144692953Z","timestamp":1740514358144,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /login.php?redirect=viewforum.php\u0026f=15\u0026start=0 HTTP/1.1\r\nHost: ww38.warez-bb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nContent-Encoding: gzip\r\nContent-Length: 1339\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Tue, 25 Feb 2025 20:12:38 GMT\r\nServer: Caddy, nginx\r\nVary: Accept-Encoding\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_aYwv0Xitdpht2pIzrjIW1nlTWiw0Wro8z/rabt9h98pWgteC2hFzHg+BHsrZkOP3ZuL6Mrdt2F00Oq+mHQiLqw==\r\nX-Buckets: bucket011,bucket088\r\nX-Domain: warez-bb.org\r\nX-Language: norwegian\r\nX-Pcrew-Blocked-Reason: hosting network\r\nX-Pcrew-Ip-Organization: Blix Solutions\r\nX-Redirect: zeropark_zeroclick\r\nX-Subdomain: ww38\r\nX-Template: tpl_CleanPeppermintBlack_twoclick\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1339,"size_decoded":2394,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (377)","md5":"1a01f80214c239eb735a34381330144c","sha1":"daa658bfe2caf6e7f2eeb3a1c479797a2cf91016","sha256":"31c7931457d830fe879e42489f59b17058743f70e2fe6753befa28460905718f","sha512":"95841859865c37b25c106cd4ca3ceeb62566a0cc68178ee6503af1b92ceaf3e4c8e204bf57d5243a81c6a90f384112fe3fb89e21095b3a9257fff376bc91c220","ssdeep":"","tlshash":"1f416588acf2f16448643642c4ebe5186c86c0332246c85cf69cd4daafc57adce55be9","first_seen":"2025-02-25T20:13:08.999349Z","last_seen":"2025-02-25T20:13:08.999349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"d38psrni17bvxu.cloudfront.net/scripts/js3.js","fqdn":"d38psrni17bvxu.cloudfront.net","domain":"d38psrni17bvxu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.226","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:12:38.462856772Z","timestamp":1740514358462,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /scripts/js3.js HTTP/1.1\r\nHost: d38psrni17bvxu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.warez-bb.org/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 453\r\nConnection: keep-alive\r\nServer: nginx\r\nDate: Tue, 25 Feb 2025 00:34:14 GMT\r\nContent-Encoding: gzip\r\nLast-Modified: Wed, 29 Jan 2025 07:52:18 GMT\r\nETag: \"d7ee6y3j8oz5uy-gzip\"\r\nVary: Accept-Encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P1\r\nX-Amz-Cf-Id: ye1Tcf-oJ35wmo4C_P8yDaSpbZ9dXAG5WOjuQi7RvXSxyUrH4G3XNA==\r\nAge: 70704\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":453,"size_decoded":1114,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (475)","md5":"f0efa0cdd18cbb4afaf3ba408af8d9c9","sha1":"7bd63f94c5356df9b7c49344459a6e527490c458","sha256":"1ea543e1c0e8e7656a0846a397055ed10469c05c5ab555076f850df0b557d3f9","sha512":"24f99321cd649d1806c1d76e8174e7f4a79f1d2207883970f68192cc37acbe70137ddf96b081609439922c1bf51e30f974fa28222bf9632a9cb404389ccb0277","ssdeep":"","tlshash":"83215ba28980587d0cde560ccf7f540ed0cdb7276dbf6839681742ca632115ba2247b9","first_seen":"2025-01-30T14:18:31.27839Z","last_seen":"2025-11-11T14:08:41.920608Z","times_seen":1289,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.warez-bb.org/munin/a/tr/browserjs?domain=warez-bb.org\u0026toggle=browserjs\u0026uid=MTc0MDUxNDM1Ny44NDI2OmYzYjQ5M2YyNzc1ZTJmYzI1Y2ZhOWIwYmNlNDBiZDJlNWI3ZDhhNDMxMzI2MGVjNzg2ZGE4MmIwYThiYTA1ZDk6NjdiZTI0MzVjZGI5Ng%3D%3D","fqdn":"ww38.warez-bb.org","domain":"warez-bb.org","tld":"org"},"ip":{"addr":"76.223.26.96","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:12:39.103619418Z","timestamp":1740514359103,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /munin/a/tr/browserjs?domain=warez-bb.org\u0026toggle=browserjs\u0026uid=MTc0MDUxNDM1Ny44NDI2OmYzYjQ5M2YyNzc1ZTJmYzI1Y2ZhOWIwYmNlNDBiZDJlNWI3ZDhhNDMxMzI2MGVjNzg2ZGE4MmIwYThiYTA1ZDk6NjdiZTI0MzVjZGI5Ng%3D%3D HTTP/1.1\r\nHost: ww38.warez-bb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.warez-bb.org/login.php?redirect=viewforum.php\u0026f=15\u0026start=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Tue, 25 Feb 2025 20:12:39 GMT\r\nServer: Caddy, nginx\r\nX-Custom-Track: browserjs\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.warez-bb.org/munin/a/ls?t=67be2436\u0026token=30bc12a71046d6474e99a8efecee09bc174fae30","fqdn":"ww38.warez-bb.org","domain":"warez-bb.org","tld":"org"},"ip":{"addr":"76.223.26.96","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:12:39.175908899Z","timestamp":1740514359175,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /munin/a/ls?t=67be2436\u0026token=30bc12a71046d6474e99a8efecee09bc174fae30 HTTP/1.1\r\nHost: ww38.warez-bb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.warez-bb.org/login.php?redirect=viewforum.php\u0026f=15\u0026start=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 201 Created\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nAccess-Control-Allow-Methods: POST, OPTIONS\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Max-Age: 86400\r\nCharset: utf-8\r\nContent-Length: 0\r\nContent-Type: text/javascript;charset=UTF-8\r\nDate: Tue, 25 Feb 2025 20:12:39 GMT\r\nServer: Caddy, nginx\r\nStatus: 201 Created\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_GooAw39nFhigUuvdNE8rWI0v1IrcIHbRHQnp2yt3IT5uI+9MQC/hh/Gjq8e/G46/6yx+SuPhQWc3wFTNrkusrA==\r\nX-Log-Success: 67be2437bcfaaac38606b804\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.warez-bb.org/favicon.ico","fqdn":"ww38.warez-bb.org","domain":"warez-bb.org","tld":"org"},"ip":{"addr":"76.223.26.96","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:12:39.210686765Z","timestamp":1740514359210,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww38.warez-bb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.warez-bb.org/login.php?redirect=viewforum.php\u0026f=15\u0026start=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nContent-Type: image/x-icon\r\nDate: Tue, 25 Feb 2025 20:12:39 GMT\r\nEtag: \"670f7248-0\"\r\nLast-Modified: Wed, 16 Oct 2024 07:59:04 GMT\r\nServer: Caddy, nginx\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.warez-bb.org/munin/a/tr/click?click=fe03a6efc0b1f8c98a7ed594f747b7faf4b75755\u0026domain=warez-bb.org\u0026uid=MTc0MDUxNDM1Ny44NDI2OmYzYjQ5M2YyNzc1ZTJmYzI1Y2ZhOWIwYmNlNDBiZDJlNWI3ZDhhNDMxMzI2MGVjNzg2ZGE4MmIwYThiYTA1ZDk6NjdiZTI0MzVjZGI5Ng%3D%3D\u0026ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4fHx8fHx8NjdiZTI0MzVjZGI3OXx8fDE3NDA1MTQzNTguMTI0N3w2NTY0NjBmNGZhYWFhY2EwNmZmOGM4NmM5M2E1YTliY2NlNzQ3NDM3fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MzBiYzEyYTcxMDQ2ZDY0NzRlOTlhOGVmZWNlZTA5YmMxNzRmYWUzMHwwfHwwfDB8fHx8fA%3D%3D\u0026kw=\u0026search=\u0026pcat=\u0026bucket=\u0026clientID=\u0026adtest=off","fqdn":"ww38.warez-bb.org","domain":"warez-bb.org","tld":"org"},"ip":{"addr":"13.248.148.254","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:12:39.25690661Z","timestamp":1740514359256,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /munin/a/tr/click?click=fe03a6efc0b1f8c98a7ed594f747b7faf4b75755\u0026domain=warez-bb.org\u0026uid=MTc0MDUxNDM1Ny44NDI2OmYzYjQ5M2YyNzc1ZTJmYzI1Y2ZhOWIwYmNlNDBiZDJlNWI3ZDhhNDMxMzI2MGVjNzg2ZGE4MmIwYThiYTA1ZDk6NjdiZTI0MzVjZGI5Ng%3D%3D\u0026ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4fHx8fHx8NjdiZTI0MzVjZGI3OXx8fDE3NDA1MTQzNTguMTI0N3w2NTY0NjBmNGZhYWFhY2EwNmZmOGM4NmM5M2E1YTliY2NlNzQ3NDM3fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MzBiYzEyYTcxMDQ2ZDY0NzRlOTlhOGVmZWNlZTA5YmMxNzRmYWUzMHwwfHwwfDB8fHx8fA%3D%3D\u0026kw=\u0026search=\u0026pcat=\u0026bucket=\u0026clientID=\u0026adtest=off HTTP/1.1\r\nHost: ww38.warez-bb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.warez-bb.org/login.php?redirect=viewforum.php\u0026f=15\u0026start=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Tue, 25 Feb 2025 20:12:39 GMT\r\nServer: Caddy, nginx\r\nX-Custom-Track: none\r\nX-View-Match: true\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lycur-trd.com/zclkvisitor/dbda89d3-f3b4-11ef-9d9a-0afff0b5d1db/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=6008dcc0-5fa9-11ef-9cc7-12832fc4c381","fqdn":"lycur-trd.com","domain":"lycur-trd.com","tld":"com"},"ip":{"addr":"35.153.58.125","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:12:39.703996718Z","timestamp":1740514359703,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /zclkvisitor/dbda89d3-f3b4-11ef-9d9a-0afff0b5d1db/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=6008dcc0-5fa9-11ef-9cc7-12832fc4c381 HTTP/1.1\r\nHost: lycur-trd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://ww38.warez-bb.org/\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:12:39 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-length: 3088\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3088,"size_decoded":3088,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (409)","md5":"e4c03eb5a2e997f3f1b902c38f1df13c","sha1":"818e3909061479b63a7bf2014315411bcddf41d3","sha256":"0daee95f38ff03c323395ffe8d15e0b6c1aa8867d87fec4425a58870372f7225","sha512":"bc0c2fe6124dac6efe70bdc223f2942b3e6cc3caeaa7dd0addbc85db8a0220c1c299b5f778461106ddd189df79c879ba0d90c32821d5f9aabd7efd1ef3af6ab2","ssdeep":"","tlshash":"115142b55a7224706d2f640d773ae20a72775223290bd4417c9e99084fb0e53b15f7fd","first_seen":"2025-02-25T20:13:09.002747Z","last_seen":"2025-02-25T20:13:09.002747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lycur-trd.com/zclkredirect?visitid=dbda89d3-f3b4-11ef-9d9a-0afff0b5d1db\u0026type=js\u0026browserWidth=1280\u0026browserHeight=1024\u0026iframeDetected=false\u0026webdriverDetected=false\u0026gpu=undefined\u0026timezone=UTC%2B00%3A00\u0026timezoneName=UTC","fqdn":"lycur-trd.com","domain":"lycur-trd.com","tld":"com"},"ip":{"addr":"35.153.58.125","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-25T20:12:39.915Z","timestamp":1740514359915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lycur-trd.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 23 Jan 2025 00:00:00 GMT","end":"Sat, 21 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:A3:09:30:78:CA:23:5F:5A:7F:72:5A:68:8A:03:C2:5A:19:59:2B","sha256":"AF:11:08:A5:44:63:5A:FE:F7:9F:1A:73:36:54:6F:40:F7:20:24:8D:B3:D4:18:77:38:31:A4:60:FF:8B:D8:A2"}}},"request":{"raw":"GET /zclkredirect?visitid=dbda89d3-f3b4-11ef-9d9a-0afff0b5d1db\u0026type=js\u0026browserWidth=1280\u0026browserHeight=1024\u0026iframeDetected=false\u0026webdriverDetected=false\u0026gpu=undefined\u0026timezone=UTC%2B00%3A00\u0026timezoneName=UTC HTTP/1.1\r\nHost: lycur-trd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lycur-trd.com/zclkvisitor/dbda89d3-f3b4-11ef-9d9a-0afff0b5d1db/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=6008dcc0-5fa9-11ef-9cc7-12832fc4c381\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 25 Feb 2025 20:12:39 GMT\r\ncontent-length: 0\r\nlocation: https://xml.ezmob.com/redirect?feed=698566\u0026auth=VnrBuF\u0026subid=lateritious-falcon\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: X-Requested-With,Content-Type\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.ezmob.com/redirect?feed=698566\u0026auth=VnrBuF\u0026subid=lateritious-falcon","fqdn":"xml.ezmob.com","domain":"ezmob.com","tld":"com"},"ip":{"addr":"198.134.116.18","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-25T20:12:40.017Z","timestamp":1740514360017,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ezmob.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jan 2025 07:41:25 GMT","end":"Sun, 27 Apr 2025 07:41:24 GMT"},"fingerprint":{"sha1":"55:3A:2D:E3:86:FB:B8:E7:A5:DB:18:6D:B4:5C:07:2E:12:0F:A5:A0","sha256":"D8:41:3A:67:18:E7:11:04:01:9A:FF:A0:74:CB:CE:57:30:86:5B:08:FF:B0:3D:3F:CB:D2:19:32:66:FB:20:C1"}}},"request":{"raw":"GET /redirect?feed=698566\u0026auth=VnrBuF\u0026subid=lateritious-falcon HTTP/1.1\r\nHost: xml.ezmob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lycur-trd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 25 Feb 2025 20:12:40 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":920,"timings":{"blocked":348,"dns":28,"connect":97,"send":0,"wait":224,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","date":"2025-02-25T20:12:41.094Z","timestamp":1740514361094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q8nsnX%2FrUPMNcKgWPYrwlFWkOUw%2BSqOgDsMKsMbBcSzk2Jz%2B74vQKZuEwsOcB%2F74N1Sa9ZZcJZQ5qbBkR7iwzYQox5C0WC2uzz%2BvXYTdsh2AvE9zSlvK9%2B5VnjvjIlUorG0j%2BVDWIXNAaA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncf-ray: 917a5a04d9e91bfa-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","date":"2025-02-25T20:12:41.053Z","timestamp":1740514361053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nextpointkaynersave.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 520 No Reason Phrase\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: same-origin\r\ncf-ray: 917a5a0499e61bfa-OSL\r\nserver: cloudflare\r\ncontent-length: 7227\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PWQ0V7sp0iBCB5nNbFX9c4u%2Bezvm8dQHW%2BOZoutWWnRhQvRh1Ft1f77dMn%2FNJJL%2Bmg%2BhzIEb5U6w6WdbvOgyrnAm1GGbdQFRqKGgsA%2Bix34MUdJ7PEcZ3je8Wm51pLh%2BvqKvgL9JDEKTKw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"520","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":7227,"size_decoded":7227,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (525)","md5":"23b1732e2460d13eff2a9781aa514e96","sha1":"e8e762d5c535387cf6630aeb2085738c00cab61c","sha256":"6c78c0e5abfb8e82358ed6eb1ed1829c9747ca0bfebb1b0232a6133cff5ced74","sha512":"6bd62a8b91479ebc95fe2692123e05bc7a69856fd8423291bbb1795803316691cbde233f739111970a567c4c8f1e4a4ee9d501fc1aedfba3d0eb7eba82404b6b","ssdeep":"96:1j9jwIjYjpNxqDK/DpKUY8qNIG4Fh2TG4FHqNyQqNuU24FeN5AokKmv9eQmVjUWP:1j9jhjYjsK/dhwxcV8VOru7srl92eR","tlshash":"56e17672b1b5027600a381d23295fb5a6ad4c213cbff9594b3ddc2732f9ee81ad13294","first_seen":"2025-02-25T20:13:09.003705Z","last_seen":"2025-02-25T20:13:09.003705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/cdn-cgi/styles/main.css","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nextpointkaynersave.com/Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html","date":"2025-02-25T20:12:41.202Z","timestamp":1740514361202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /cdn-cgi/styles/main.css HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nextpointkaynersave.com/Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Feb 2025 16:51:28 GMT\r\ncache-control: max-age=7200, public\r\ncontent-encoding: gzip\r\netag: W/\"67b8af10-1f4d\"\r\nserver: cloudflare\r\ncf-ray: 917a5a0599ed1bfa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nexpires: Tue, 25 Feb 2025 22:12:41 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3122,"size_decoded":3122,"mime_type":"text/css","magic":"gzip compressed data, from Unix","md5":"aab0c5da39e59bde7895a582bba5ff89","sha1":"5d1c97cbfc8e24d33ef3f02c6ea02888b3755f1a","sha256":"8b811fe6a9b5fae3fb915359f8a945cfd5596a0d07be6294c5fa8b95f8f82ae7","sha512":"4bdd91d18bef3b01f76a6aa17a7a76cb5ae1ef138acdeadd4cd18d8fa1e223be88e9862bd6ef4c4dbcf36da7f3aa17e445d4b989505c8c320811bb6a11cc968b","ssdeep":"","tlshash":"6c513b6573a8cd05d63e857f58e4498b4aab84bc4c38b21608ed8c259bea0931bdcd66","first_seen":"2023-05-05T00:40:56Z","last_seen":"2025-02-28T12:47:36.83212Z","times_seen":497,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/cdn-cgi/images/cf-icon-error.png","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nextpointkaynersave.com/Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html","date":"2025-02-25T20:12:41.240Z","timestamp":1740514361240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /cdn-cgi/images/cf-icon-error.png HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextpointkaynersave.com/cdn-cgi/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 854\r\nlast-modified: Fri, 21 Feb 2025 16:51:28 GMT\r\naccept-ranges: bytes\r\netag: \"67b8af10-356\"\r\nserver: cloudflare\r\ncf-ray: 917a5a05b9ef1bfa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nexpires: Tue, 25 Feb 2025 22:12:41 GMT\r\ncache-control: max-age=7200, public\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":854,"size_decoded":854,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"e5577f04b6d92590410e26bd2292933b","sha1":"16946b2c99d98a57f83eac170ce94b012b7d1a7b","sha256":"67f70597a183fbca7fac55d609fbaac5c34bb4d4d32a0530bbbbb42591f2de2f","sha512":"e7ee8db81b1787271aff8ebad8738468e4b019a794d9a2cf78cf286a2557e37c6a1caed9e25c073be7d1073e53f3703e63ef306fd1063829e2a445d6f8cc2fe2","ssdeep":"","tlshash":"d401165525083526dff35e0983fc871a98061ad462370dcfe697953088ff4391397a75","first_seen":"2023-04-21T15:51:04Z","last_seen":"2026-04-05T13:52:26.214967Z","times_seen":36161,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/favicon.ico","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","date":"2025-02-25T20:12:41.084Z","timestamp":1740514361084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nextpointkaynersave.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AWwe%2FEcTc6P%2BKBMiljJEjlmVRhVM8f2fGNN%2B%2B6P%2FcQAUCa4rwnEZ0oiIDT5KBwWC39cjeJuiNJgRXqeiJnFMpq%2FRCmCrCa5ewNjaKcXt76DeQvNMKHy0YIS%2BHcJ%2B6tbzjMJSIRhXNFaHuw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 917a5a04c9e81bfa-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":18160,"size_decoded":20924,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2534)","md5":"9b32b888eba2dbaeae99d83819d0583a","sha1":"3a456837d1f41fd163cd3973c27e71be42d43e8c","sha256":"9f9ca8c04fc57e67278b1b914b719d4e8138a94d2ce2895addeddeb925e6115d","sha512":"c466021fb1fda262927032c520a4a77371180ebde05442df257f385668d9335675c6c4b244b43d4c0bf704d2019fe58fc6dafaf8b423ee2accf340e233f52b83","ssdeep":"384:XQdTZM1DnrGueMolbwvwlsBxDDsyALjLwX7rInx/8:XQdTZMhnrGnp8vw9nanmx/8","tlshash":"8592c62a15f30255654324bc23fbb7d5617f80138bd6eca07ece91408f89ba444e2beb","first_seen":"2025-01-28T20:39:31.728413Z","last_seen":"2025-02-26T16:06:21.699403Z","times_seen":11,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash.cloudflare.com/favicon-16x16.png","fqdn":"dash.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.110.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","date":"2025-02-25T20:12:41.186Z","timestamp":1740514361186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dash.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jan 2025 07:38:02 GMT","end":"Wed, 02 Apr 2025 08:38:01 GMT"},"fingerprint":{"sha1":"3B:B6:8A:0B:1D:8F:75:4B:AD:56:F9:EF:8C:AE:BD:41:D6:4F:0F:9C","sha256":"C8:AA:F3:F9:25:08:00:B4:E5:A6:83:E5:5C:69:4C:7F:EC:03:25:9E:0A:A5:0A:80:07:60:A9:F1:40:E0:1E:FF"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: dash.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nextpointkaynersave.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 370\r\naccess-control-allow-origin: dash.cloudflare.com\r\ncache-control: public, max-age=14400\r\netag: \"97695ee1d0e4c5c95223a67bb6f7933f\"\r\naccess-control-allow-credentials: true\r\naccess-control-allowed-methods: GET, POST, DELETE, PUT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-asset-source: 0a7a0537\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H3RX57RTr3SmhMpu9Shvvoz6RcMqG9egYOSpa5sfTY4bG1Jn%2Bjsr5155uZhcB7QeePt9oetpxd%2BQmyBifldFTUzNdDBABVaJQ%2BnGnWxbzrsyc5VkeeezDXvvVeuFuNAn8MRTiTeV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Wed, 26 Feb 2025 00:12:41 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\nset-cookie: __cf_bm=lzwWT62f45Y4Cn7x2fVWAu__IMpanwBec6vBREFKPwA-1740514361-1.0.1.1-0_I27oxwmFBCw2wTiuBpi_pSyMdl.GkZ3MvGfTD1XKQ4cvBAYu3Y00HrvtsrstX8669_3a.V_wWHdjpRkIgRzg; path=/; expires=Tue, 25-Feb-25 20:42:41 GMT; domain=.dash.cloudflare.com; HttpOnly; Secure; SameSite=None\n__cfruid=f74a334a09f3cea02a4b00dbdd1f5b3ace59a4bd-1740514361; path=/; domain=.dash.cloudflare.com; HttpOnly; Secure; SameSite=None\n_cfuvid=9wz918yQDPc32Hs284eiCTdqXH6j83ZBXUMOFHJ5ahE-1740514361307-0.0.1.1-604800000; path=/; domain=.dash.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 917a5a05cfe5b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":370,"size_decoded":370,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5f5a8ef2cfde7c8e551238163bf35c29","sha1":"9f201d8b5c220f9c16b921eefd245ef403d7d8e0","sha256":"01aa824c92ae6da0157214fe455877058e8240c76d5bb8b9d8b85e04c47b19e1","sha512":"946d2647b24adfd58af7d2c6623cb9fd78b19056f8857f33f7b5fe353f2a486ec19c8b596c8c48e4385b20db945c59f431c062066acc367e31d8851d4e94cab3","ssdeep":"","tlshash":"dde060e0076e953cd3c571390302d76009f5806800620a0c03b3c931201bf7080fc237","first_seen":"2023-06-29T03:08:23Z","last_seen":"2026-04-04T23:57:57.174491Z","times_seen":261,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":5,"connect":8,"send":0,"wait":62,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","date":"2025-02-25T20:12:41.053Z","timestamp":1740514361053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 520 No Reason Phrase\r\ndate: Tue, 25 Feb 2025 20:13:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7227\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dSOo9tkYzi3OoUbUyjMT58aqsEA9ebluo%2BkXU1Y91vL5jOtDYrxXCehQFsRQ0YslTlCFYFuVfmHswc0v5H5JtNBNks7CJdKbVtXINKVwr51%2FQTys4fFUsxbd5EF%2BJZMUN4sHmcKx1owx7A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nserver: cloudflare\r\ncf-ray: 917a5a99a86e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=531\u0026min_rtt=443\u0026rtt_var=148\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3235\u0026recv_bytes=1092\u0026delivery_rate=5656250\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=ce6b6f6f72666854\u0026ts=104\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"520","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":7227,"size_decoded":7227,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (525)","md5":"93fd81a29401e460b16826b922ecb063","sha1":"9d46eb7480ec9ec4f5f6e9ca9e35197e0bdc215a","sha256":"d808941e32f42456ce9dabdc1616e75260734df98d2db26eaa76d4ed3e464837","sha512":"773845e5104964787b967eff88c1a07c0367771cfaedec91eb30ee47b002d958269f97f53a24d6e258af80526dde9ef43be07cf2550f4f0416b16ae2b4a08715","ssdeep":"96:1j9jwIjYjpNxqDK/DpKUY8qN2G4Fh2TG4FHqNyQqNuU24FeN5AokKmv9eQmVjUW4:1j9jhjYjsK/dTwxcV8VOru71rl92eR","tlshash":"47e17672b1b5027600a381d23295fb5a6ad4c213cbff95d4b3ddc2732f9ee81a913294","first_seen":"2025-02-25T20:13:09.008235Z","last_seen":"2025-02-25T20:13:09.008235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/cdn-cgi/zaraz/s.js?z=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","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","date":"2025-02-25T20:12:41.096Z","timestamp":1740514361096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /cdn-cgi/zaraz/s.js?z=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 HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nextpointkaynersave.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1Tii9zbuL8nvOSEbowndiXrSImCarZZOYOY4yjptIdi4YwK0F2L9g12AbtLxxK6gpvwCRloS9sSGedFaAFyA7VxhDQExKON6IuJSd7k%2FGpNgSDLZZH3zu%2F4E3Zu1Y%2B4%2BafwyehDaKXo9Yg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 917a5a04d9ea1bfa-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dash.cloudflare.com/favicon-196x196.png","fqdn":"dash.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.110.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","date":"2025-02-25T20:12:41.184Z","timestamp":1740514361184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dash.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jan 2025 07:38:02 GMT","end":"Wed, 02 Apr 2025 08:38:01 GMT"},"fingerprint":{"sha1":"3B:B6:8A:0B:1D:8F:75:4B:AD:56:F9:EF:8C:AE:BD:41:D6:4F:0F:9C","sha256":"C8:AA:F3:F9:25:08:00:B4:E5:A6:83:E5:5C:69:4C:7F:EC:03:25:9E:0A:A5:0A:80:07:60:A9:F1:40:E0:1E:FF"}}},"request":{"raw":"GET /favicon-196x196.png HTTP/1.1\r\nHost: dash.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nextpointkaynersave.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 10972\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: dash.cloudflare.com\r\naccess-control-allowed-methods: GET, POST, DELETE, PUT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=16683\r\netag: \"6c8c97eaf940230ee5b3b91cc144e848\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aK4MhIXDvGyzuMVWyqxkkB0S106r45Wh42iGSsL14oXDXA4WX%2BGMA5qLxcfeqStzkUVRuijkN5hPg1WgB0mupBn6TZboR2CpumJQptP42z%2By24gAFLuf01hJYSkv3sY6ditdS1SNWDD4WO7CyIWGxERb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-asset-source: cf-pages\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 4502\r\nexpires: Wed, 26 Feb 2025 00:12:41 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\nset-cookie: __cf_bm=QB0NAmMlvEf01HqgyFJCkK4kkd9ihBz7F1L2GnNDmU4-1740514361-1.0.1.1-ZQg6i2OhAe3KV2FnLrAtVtG21OTZUz1zjBM5tNmKKRHH5PIdVIdQhpy12gO1aXX7jpwpNWMqeB8i_Lp9YZdICw; path=/; expires=Tue, 25-Feb-25 20:42:41 GMT; domain=.dash.cloudflare.com; HttpOnly; Secure; SameSite=None\n__cfruid=f74a334a09f3cea02a4b00dbdd1f5b3ace59a4bd-1740514361; path=/; domain=.dash.cloudflare.com; HttpOnly; Secure; SameSite=None\n_cfuvid=sg5gXHOeAsK0Nu6addGOv6ct2xAGGrzCqhByKKPXpm8-1740514361281-0.0.1.1-604800000; path=/; domain=.dash.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 917a5a05cfe0b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10972,"size_decoded":10972,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced","md5":"bc6ae14562259f8d44557a73f932b9e1","sha1":"97849369c0a7b688cab059c1fddf605bbd384e28","sha256":"e95fec516055a0c2822ae17a5fa07fd9578b2f2e155ff639e0f583a79c9e38e1","sha512":"958ebd8ee14208fcdb7632bd63754a3b9b22aed177ec1fb8529f0d7b975958f76a154962e3764ea728555e054046b242463afaaf5d219f32529e9e3b520220f0","ssdeep":"192:tYQ9++gElef4pdxWTTe9sLx00neK5GypSNgGga0F6dD403uZ+SdKbBUp41Tfkoh:uQ03qeC4E0n3TpHdEYZQFrl5h","tlshash":"e532bf600fa58637e827715f27989db89f1eb294792e9929d00b84c1db6bd1d3f180bc","first_seen":"2024-07-01T21:07:42Z","last_seen":"2025-04-24T06:21:06.726768Z","times_seen":34,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":38,"receive":2,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-25T20:12:40.594Z","timestamp":1740514360594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lycur-trd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:12:40 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OtOyKndRGbvfRTWXjz%2BS3QKIsfvATOnP4M6ejegfjGJhF5uNN%2BG2I3A7w%2FskO6pNszp2p5Fyx3Dhei4lzRartUVnYh0xBPAgGynatGQvQfMZ2PVs3%2BHMfhPBfEoybDCS%2B742AbSpE8eMVw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 917a5a021ac40b3d-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=736\u0026min_rtt=553\u0026rtt_var=210\u0026sent=8\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3311\u0026recv_bytes=1430\u0026delivery_rate=6895238\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=0a0006becb17613d\u0026ts=214\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20924,"size_decoded":20924,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":56,"dns":25,"connect":1,"send":0,"wait":189,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/cdn-cgi/images/cf-icon-ok.png","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nextpointkaynersave.com/Cloudflare%20_%20Web%20Performance%20\u0026%20Security_files/saved_resource.html","date":"2025-02-25T20:12:41.238Z","timestamp":1740514361238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /cdn-cgi/images/cf-icon-ok.png HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextpointkaynersave.com/cdn-cgi/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 946\r\nlast-modified: Fri, 21 Feb 2025 16:51:28 GMT\r\naccept-ranges: bytes\r\netag: \"67b8af10-3b2\"\r\nserver: cloudflare\r\ncf-ray: 917a5a05b9ee1bfa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nexpires: Tue, 25 Feb 2025 22:12:41 GMT\r\ncache-control: max-age=7200, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":946,"size_decoded":946,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"dfaf0fbb758c874be231335db178381d","sha1":"8f2597eb7ba4c89892aac0559816db3f5280b23e","sha256":"ed732380ee3ff0f2d841784da213c8c05d2b5ae187a5217b419d21cae5cedb1b","sha512":"aa390c353731b29b57276cd0f8fd9ffa8e9f8aa31989e6fdbb961ef9e56bb7da17ac1fe017f2e8d345d7cb32a04b27e8dab76496264bda057023d0624854dd9b","ssdeep":"","tlshash":"f21180a063644d6ed192557f64dcc683182f010c0a7cb11b18de88170f968d317ddf7a","first_seen":"2023-04-16T05:42:45Z","last_seen":"2026-04-05T13:52:26.208538Z","times_seen":36171,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextpointkaynersave.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?","fqdn":"nextpointkaynersave.com","domain":"nextpointkaynersave.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextpointkaynersave.com/index51.php?flow_id=103\u0026conversion=Xih4RNblVOQ\u0026bid=0.005\u0026campaign=1477682\u0026pubfeed=698566\u0026subid=lateritious-falcon\u0026country=no\u0026city=Oslo\u0026os=Windows+10\u0026browser=FIREFOX_134.0\u0026carrier=Blix+Solutions","date":"2025-02-25T20:12:41.114Z","timestamp":1740514361114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nextpointkaynersave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Feb 2025 11:21:34 GMT","end":"Tue, 06 May 2025 12:19:40 GMT"},"fingerprint":{"sha1":"00:91:A1:24:2B:14:DC:C4:B7:B4:4B:E6:06:FE:AB:7C:6F:88:D5:98","sha256":"D8:C8:E2:83:DD:5F:1E:C6:80:70:82:FA:EE:70:8B:A7:FD:2A:B7:96:A2:9E:BB:6C:17:DC:05:8E:A0:4B:99:EE"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? HTTP/1.1\r\nHost: nextpointkaynersave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:12:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RKXhs%2BabPPRe%2FSDNj%2F7zL9y58GCeLgqV8f2vylA72A9syo79f5ZgFg52LkwxwGFqi0Qz6TChKirRp3tSB9xyT7vZJECzEojVBJ3Kav%2FJaOp2kRPz9rhj7IPswmNM8HamlAVI%2BS6b5dR7Dg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 917a5a04f9eb1bfa-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8451,"size_decoded":8451,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8451), with no line terminators","md5":"7c18432c4f2ad065b4f66d2689c5ad12","sha1":"6024674defab21643a102a22662f45e4e998946b","sha256":"d95c46bade1dd520248ae7240c55ca68461904141b058b36a3c90cb2175c6b2f","sha512":"6a05e3e9acaf9ea4444de701dd274a873bbc9e267d8ca281d1f7e256dc0cd692fb93fadfc493faade8ee65d819c8e2013f5bbf452dfc445ae5d5235c0e757378","ssdeep":"192:QwJ5e7N/UgrqNgtFngrlrTEXwi4Y1N2nEyFI+nQxanGiikOB:QTcSqESFTEgi93AxOeIaa","tlshash":"3702f9c6768abc4102761c9628aba577741fbe612cf94f234403d8f8b6707c4946fe26","first_seen":"2025-02-25T20:13:09.011149Z","last_seen":"2025-02-25T20:13:09.011149Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-25","alert":"Sinkholed","trigger":"nextpointkaynersave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}