{"report_id":"89a3043b-0075-4b6a-95e1-3dc4a4fc6164","version":0,"status":"done","tags":["phishing","kali365","aitm"],"date":"2026-08-19T22:31:08Z","url":{"schema":"http","addr":"777744441111h39939.com/","fqdn":"777744441111h39939.com","domain":"777744441111h39939.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.777744441111h39939.com/","fqdn":"www.777744441111h39939.com","domain":"777744441111h39939.com","tld":"com"},"title":"Microsoft User shared “Shared Document” with you","dom":{"size":9896,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9888), with no line terminators","md5":"c948507420a352eacbff2f03441115dd","sha1":"085979d15bbfb4d1ca340ac5fa648a6a8c0cada3","sha256":"bae39a95a18720962f51375995bf2f7f018a9ea8ac63314b79113e4fe6d9d9f4","sha512":"3846cd82a379903a79e9738053ec7083d641563b633af98b6a50e9a9886f98faabe0012483b74ee46f33211c11d65d1200c259356a00b05c3b094f6dbae2bafc","ssdeep":"192:mCDPloTe24r5wyQR1S3NM+DHHgjswv9e8ak+jpN3yyDyApnQSd7yZ:7DPlkepo1SjgjsGepdyyDyApnQSd7yZ","tlshash":"bc12d5b3b1841a35a06b89d3b479a35f30b0c65ee9234608d9e9b670d8e1ef39a35744","dom_hash":"domhash95be4ca7ff306b335f3c1761c2c1de92","first_seen":"2026-08-19T22:31:09.930721Z","last_seen":"2026-08-19T22:31:09.930721Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"777744441111h39939.com/","fqdn":"777744441111h39939.com","domain":"777744441111h39939.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T22:31:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.777744441111h39939.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"777744441111h39939.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Kali365 Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","kali365","aitm"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Kali365 Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","kali365","aitm"],"meta":null}]},"summary":[{"fqdn":"pz3d81gwxg.onlinebrandedge.de","ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-19T01:13:38.93856Z","last_seen":"2026-08-19T01:13:38.93856Z","alert_count":16,"request_count":8,"received_data":5800,"sent_data":4068,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"777744441111h39939.com","ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-03","domain_rank":0,"first_seen":"2026-08-19T01:13:38.939973Z","last_seen":"2026-08-19T01:13:38.939973Z","alert_count":5,"request_count":1,"received_data":361,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.777744441111h39939.com","ip":{"addr":"216.150.16.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-03","domain_rank":0,"first_seen":"2026-08-19T01:13:38.937219Z","last_seen":"2026-08-19T01:13:38.937219Z","alert_count":12,"request_count":2,"received_data":10662,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Kali365 Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","kali365","aitm"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.777744441111h39939.com/","fqdn":"www.777744441111h39939.com","domain":"777744441111h39939.com","tld":"com"},"ip":{"addr":"216.150.16.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2063354ec20074db583a5fbcfab0eadc","sha1":"e57870b1c1ebfc257b435a12dc48195d9d967eda","sha256":"abf3853ef4a0455d55def794d4b9e8ebb4f2bedf1dee78fd63ae5d4d87976a03","sha512":"c4354f51247004667b21e43ac10d34f25a6e9c7dd098323fd5cba6dd250150bcfa6a509bac4dcde1b568437877a1717ac303ad59098206c6f91f312be6f24787","ssdeep":"","tlshash":"6d6154e371d61f7450ee5dab70bd832d34b1c80dbc024518dca95db19834fa6a97aea0","size":3361,"data":"","first_seen":"2026-08-19T01:13:43.818409Z","last_seen":"2026-08-19T22:31:09.945277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.777744441111h39939.com/favicon.ico","fqdn":"www.777744441111h39939.com","domain":"777744441111h39939.com","tld":"com"},"ip":{"addr":"216.150.16.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:30:41.999Z","timestamp":1787178641999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.777744441111h39939.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 10:55:18 GMT","end":"Sun, 01 Nov 2026 10:55:17 GMT"},"fingerprint":{"sha1":"C3:20:61:5B:AB:D5:A6:FF:71:FF:C0:F0:C8:94:00:E1:F1:74:E5:F7","sha256":"22:36:ED:6C:4B:0F:A8:48:7A:F7:F3:00:B7:6D:F1:79:3C:5D:E7:4D:59:64:08:3B:21:AA:AB:B0:6C:9F:2A:B8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.777744441111h39939.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.777744441111h39939.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 19 Aug 2026 22:30:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::vm7js-1787178642007-fc6565c32de7\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":404,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"393f33962a7e18ced5b9e9273a04e936","sha1":"12e16b1430f5ccfb547293472ab4d3a6aa1ed7e7","sha256":"e8fac889958b2a3d302bbf3c1d04aabc602baadaa0c201c74648126992c05607","sha512":"9c674476e0dce9f90406ce1f9d9da3c1519abb44b8b5508a9ff2e761cdc2a2a4fdd87a50bae0a76c6f3cb9a35a5407118ad91f8f744efdea6b15cbf7b3d68fd8","ssdeep":"","tlshash":"7da0110e8a800c0c33c0080020ca023a08b0823aaeaaea0822c8e208b2002cfa308083","first_seen":"2026-08-19T22:31:09.934868Z","last_seen":"2026-08-19T22:31:09.934868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.777744441111h39939.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Kali365 Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","kali365","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"pz3d81gwxg.onlinebrandedge.de/api/status/7876","fqdn":"pz3d81gwxg.onlinebrandedge.de","domain":"onlinebrandedge.de","tld":"de"},"ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:30:48.375Z","timestamp":1787178648375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinebrandedge.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:19:03 GMT","end":"Sun, 25 Oct 2026 19:17:38 GMT"},"fingerprint":{"sha1":"C7:E2:D2:E9:04:AA:4B:63:A2:65:0F:C3:74:DB:9E:66:E3:FA:D7:A0","sha256":"50:F7:8B:2C:A8:56:40:6B:04:86:35:FD:C4:7F:4B:A1:67:B4:53:85:33:0F:32:49:4A:70:A2:B8:86:63:30:A3"}}},"request":{"raw":"GET /api/status/7876 HTTP/1.1\r\nHost: pz3d81gwxg.onlinebrandedge.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.777744441111h39939.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.777744441111h39939.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 22:30:48 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.777744441111h39939.com\r\nvary: Origin, Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNge%2FFtgOcGC0rJZDQfRcmhTxmiYKTRd5qSHnemyOK4nPddtjwWl%2BY3K%2FdOOPG0adCi8l5DHy9oED6BJh4Xwegb3Ti3elZPdfyFDjoAgno4Hz3tRh4u1devySBZU0x1jDKuQ5wVRTHCokIKaHuzvag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dc9ad85a690731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":708,"mime_type":"application/json","magic":"JSON text data","md5":"1991b7c8ec390f5af45312fc0e09944c","sha1":"d61cf78973a9c26e718fb9fe1cb3c8533893d95f","sha256":"e83c12db5ee3c62282c295c521fa51a10e6cfff8e247c64f09838dbc134bd385","sha512":"80bed01bd6f8fecdcfe32308c4dc471907a48a7418c73be4874046c51c9bcf013cbc53bd0e4fc92afb3020d0c08fb675611712f81799a9a1bf593c4dfd8c8480","ssdeep":"","tlshash":"e9700022280800000ac80800e0000238baa0ca80002ba0c0280c80288820880e008000","first_seen":"2026-03-04T14:57:38.603599Z","last_seen":"2026-08-20T01:42:01.335747Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pz3d81gwxg.onlinebrandedge.de/api/status/7876","fqdn":"pz3d81gwxg.onlinebrandedge.de","domain":"onlinebrandedge.de","tld":"de"},"ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:30:54.676Z","timestamp":1787178654676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinebrandedge.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:19:03 GMT","end":"Sun, 25 Oct 2026 19:17:38 GMT"},"fingerprint":{"sha1":"C7:E2:D2:E9:04:AA:4B:63:A2:65:0F:C3:74:DB:9E:66:E3:FA:D7:A0","sha256":"50:F7:8B:2C:A8:56:40:6B:04:86:35:FD:C4:7F:4B:A1:67:B4:53:85:33:0F:32:49:4A:70:A2:B8:86:63:30:A3"}}},"request":{"raw":"GET /api/status/7876 HTTP/1.1\r\nHost: pz3d81gwxg.onlinebrandedge.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.777744441111h39939.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.777744441111h39939.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 22:30:54 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.777744441111h39939.com\r\nvary: Origin, Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwihssCVCphu%2BRq2mWD3VpBnhnLHLLklRypP%2FpZLjafDpZxVKZaMGRELUXzhFI%2Fo%2Bi8mZOHclG9s8yfnG1mpgw6b%2BLyB4ZtU0rn39TuRCDE5AefKdJOf7mWM4OGeNVxjh%2BYv5LwVDEpVFc7hC9mPyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dc9affbdc00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":714,"mime_type":"application/json","magic":"JSON text data","md5":"1991b7c8ec390f5af45312fc0e09944c","sha1":"d61cf78973a9c26e718fb9fe1cb3c8533893d95f","sha256":"e83c12db5ee3c62282c295c521fa51a10e6cfff8e247c64f09838dbc134bd385","sha512":"80bed01bd6f8fecdcfe32308c4dc471907a48a7418c73be4874046c51c9bcf013cbc53bd0e4fc92afb3020d0c08fb675611712f81799a9a1bf593c4dfd8c8480","ssdeep":"","tlshash":"e9700022280800000ac80800e0000238baa0ca80002ba0c0280c80288820880e008000","first_seen":"2026-03-04T14:57:38.603599Z","last_seen":"2026-08-20T01:42:01.335747Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pz3d81gwxg.onlinebrandedge.de/api/status/7876","fqdn":"pz3d81gwxg.onlinebrandedge.de","domain":"onlinebrandedge.de","tld":"de"},"ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:30:57.823Z","timestamp":1787178657823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinebrandedge.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:19:03 GMT","end":"Sun, 25 Oct 2026 19:17:38 GMT"},"fingerprint":{"sha1":"C7:E2:D2:E9:04:AA:4B:63:A2:65:0F:C3:74:DB:9E:66:E3:FA:D7:A0","sha256":"50:F7:8B:2C:A8:56:40:6B:04:86:35:FD:C4:7F:4B:A1:67:B4:53:85:33:0F:32:49:4A:70:A2:B8:86:63:30:A3"}}},"request":{"raw":"GET /api/status/7876 HTTP/1.1\r\nHost: pz3d81gwxg.onlinebrandedge.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.777744441111h39939.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.777744441111h39939.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 22:30:57 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.777744441111h39939.com\r\nvary: Origin, Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xm0vRYRCl7z4wAtVF2OlqOqBt7VgDEESg%2FB2VaGykWuIJ%2BMcZJdkQtXbnZzxaViSYQqKhqktqE8JzU%2BEXmfOX7QQ5lXczZD0kOQMaPIlz%2FZTmP%2Fh2tEvBqtKdqD8bDw4AiaL67SP9zZQpu%2BCguritQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dc9b136f250731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":714,"mime_type":"application/json","magic":"JSON text data","md5":"1991b7c8ec390f5af45312fc0e09944c","sha1":"d61cf78973a9c26e718fb9fe1cb3c8533893d95f","sha256":"e83c12db5ee3c62282c295c521fa51a10e6cfff8e247c64f09838dbc134bd385","sha512":"80bed01bd6f8fecdcfe32308c4dc471907a48a7418c73be4874046c51c9bcf013cbc53bd0e4fc92afb3020d0c08fb675611712f81799a9a1bf593c4dfd8c8480","ssdeep":"","tlshash":"e9700022280800000ac80800e0000238baa0ca80002ba0c0280c80288820880e008000","first_seen":"2026-03-04T14:57:38.603599Z","last_seen":"2026-08-20T01:42:01.335747Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pz3d81gwxg.onlinebrandedge.de/api/generate?lure=FD2ak2Mmu8Y","fqdn":"pz3d81gwxg.onlinebrandedge.de","domain":"onlinebrandedge.de","tld":"de"},"ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:30:43.092Z","timestamp":1787178643092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinebrandedge.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:19:03 GMT","end":"Sun, 25 Oct 2026 19:17:38 GMT"},"fingerprint":{"sha1":"C7:E2:D2:E9:04:AA:4B:63:A2:65:0F:C3:74:DB:9E:66:E3:FA:D7:A0","sha256":"50:F7:8B:2C:A8:56:40:6B:04:86:35:FD:C4:7F:4B:A1:67:B4:53:85:33:0F:32:49:4A:70:A2:B8:86:63:30:A3"}}},"request":{"raw":"OPTIONS /api/generate?lure=FD2ak2Mmu8Y HTTP/1.1\r\nHost: pz3d81gwxg.onlinebrandedge.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.777744441111h39939.com/\r\nOrigin: https://www.777744441111h39939.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 22:30:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nallow: OPTIONS, HEAD, POST, GET\r\naccess-control-allow-origin: https://www.777744441111h39939.com\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\nvary: Origin, Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7BMHkD%2Be6lvRnh08knEFQEFLK4um7CKD7Z03TPPWRKCUtTX85Kwutz8QMUX4HRgUmM%2BjKoaZu6EeB7ZhRRn6CUOHSXsjmGl32pvn68l1slVUGK7GuN3Hkqff7md26zyFuLKKL9Zc%2FX97cQQWqUf8w%3D%3D\"}]}\r\ncf-ray: a2dc9ab778840731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":828,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":8,"connect":14,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pz3d81gwxg.onlinebrandedge.de/api/status/7876","fqdn":"pz3d81gwxg.onlinebrandedge.de","domain":"onlinebrandedge.de","tld":"de"},"ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:30:45.231Z","timestamp":1787178645231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinebrandedge.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:19:03 GMT","end":"Sun, 25 Oct 2026 19:17:38 GMT"},"fingerprint":{"sha1":"C7:E2:D2:E9:04:AA:4B:63:A2:65:0F:C3:74:DB:9E:66:E3:FA:D7:A0","sha256":"50:F7:8B:2C:A8:56:40:6B:04:86:35:FD:C4:7F:4B:A1:67:B4:53:85:33:0F:32:49:4A:70:A2:B8:86:63:30:A3"}}},"request":{"raw":"GET /api/status/7876 HTTP/1.1\r\nHost: pz3d81gwxg.onlinebrandedge.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.777744441111h39939.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.777744441111h39939.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 22:30:45 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.777744441111h39939.com\r\nvary: Origin, Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mx8rLwwdZSNb%2BzY8NnGgJK2x0UTCmWHFpCKpu9dLgJf9rg%2FIqufQQc9A37kYwIkI2tShSCSjw4EVTpRtHboTGRG4W3cKYs8qMXWMcMDBsK16xLCBLxLZyJDymgbMY3Z9LjZA96k9Tk6M1Dn6TrilPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dc9ac4a9230731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":706,"mime_type":"application/json","magic":"JSON text data","md5":"1991b7c8ec390f5af45312fc0e09944c","sha1":"d61cf78973a9c26e718fb9fe1cb3c8533893d95f","sha256":"e83c12db5ee3c62282c295c521fa51a10e6cfff8e247c64f09838dbc134bd385","sha512":"80bed01bd6f8fecdcfe32308c4dc471907a48a7418c73be4874046c51c9bcf013cbc53bd0e4fc92afb3020d0c08fb675611712f81799a9a1bf593c4dfd8c8480","ssdeep":"","tlshash":"e9700022280800000ac80800e0000238baa0ca80002ba0c0280c80288820880e008000","first_seen":"2026-03-04T14:57:38.603599Z","last_seen":"2026-08-20T01:42:01.335747Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pz3d81gwxg.onlinebrandedge.de/api/status/7876","fqdn":"pz3d81gwxg.onlinebrandedge.de","domain":"onlinebrandedge.de","tld":"de"},"ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:30:51.518Z","timestamp":1787178651518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinebrandedge.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:19:03 GMT","end":"Sun, 25 Oct 2026 19:17:38 GMT"},"fingerprint":{"sha1":"C7:E2:D2:E9:04:AA:4B:63:A2:65:0F:C3:74:DB:9E:66:E3:FA:D7:A0","sha256":"50:F7:8B:2C:A8:56:40:6B:04:86:35:FD:C4:7F:4B:A1:67:B4:53:85:33:0F:32:49:4A:70:A2:B8:86:63:30:A3"}}},"request":{"raw":"GET /api/status/7876 HTTP/1.1\r\nHost: pz3d81gwxg.onlinebrandedge.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.777744441111h39939.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.777744441111h39939.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 22:30:51 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.777744441111h39939.com\r\nvary: Origin, Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImlLg2u4cpZDgcUwp0ZsZuYxT3RrHeZv46NQh0tRWgmRx6%2FXHc3ruHwUSQDuXwnoCEujd%2FZu4TtrS1tVxdO89eTNYoDnue8Yj5AcG3nse%2FvwYo4rO4s%2Fui0UoxkbJnORx6myDQYBY%2FQlnBaBtoz8GA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dc9aebfbd70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":712,"mime_type":"application/json","magic":"JSON text data","md5":"1991b7c8ec390f5af45312fc0e09944c","sha1":"d61cf78973a9c26e718fb9fe1cb3c8533893d95f","sha256":"e83c12db5ee3c62282c295c521fa51a10e6cfff8e247c64f09838dbc134bd385","sha512":"80bed01bd6f8fecdcfe32308c4dc471907a48a7418c73be4874046c51c9bcf013cbc53bd0e4fc92afb3020d0c08fb675611712f81799a9a1bf593c4dfd8c8480","ssdeep":"","tlshash":"e9700022280800000ac80800e0000238baa0ca80002ba0c0280c80288820880e008000","first_seen":"2026-03-04T14:57:38.603599Z","last_seen":"2026-08-20T01:42:01.335747Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pz3d81gwxg.onlinebrandedge.de/api/status/7876","fqdn":"pz3d81gwxg.onlinebrandedge.de","domain":"onlinebrandedge.de","tld":"de"},"ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:31:00.957Z","timestamp":1787178660957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinebrandedge.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:19:03 GMT","end":"Sun, 25 Oct 2026 19:17:38 GMT"},"fingerprint":{"sha1":"C7:E2:D2:E9:04:AA:4B:63:A2:65:0F:C3:74:DB:9E:66:E3:FA:D7:A0","sha256":"50:F7:8B:2C:A8:56:40:6B:04:86:35:FD:C4:7F:4B:A1:67:B4:53:85:33:0F:32:49:4A:70:A2:B8:86:63:30:A3"}}},"request":{"raw":"GET /api/status/7876 HTTP/1.1\r\nHost: pz3d81gwxg.onlinebrandedge.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.777744441111h39939.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.777744441111h39939.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 22:31:01 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.777744441111h39939.com\r\nvary: Origin, Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zDJtXOS0w8D7Sg1Q1t0g%2FGY5vOjjCF%2F0ohb5wqpbUychOcadL6btnn4fjxgplcO5ak3GX3mSm4JzH1OBkIKEVndlq78ncaSKHR4QF5oUly%2B8mLyrJ7zA7WxVBQGXeMzTo91zB1qoKf90OP0nZ1dxJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dc9b26f8ae0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":708,"mime_type":"application/json","magic":"JSON text data","md5":"1991b7c8ec390f5af45312fc0e09944c","sha1":"d61cf78973a9c26e718fb9fe1cb3c8533893d95f","sha256":"e83c12db5ee3c62282c295c521fa51a10e6cfff8e247c64f09838dbc134bd385","sha512":"80bed01bd6f8fecdcfe32308c4dc471907a48a7418c73be4874046c51c9bcf013cbc53bd0e4fc92afb3020d0c08fb675611712f81799a9a1bf593c4dfd8c8480","ssdeep":"","tlshash":"e9700022280800000ac80800e0000238baa0ca80002ba0c0280c80288820880e008000","first_seen":"2026-03-04T14:57:38.603599Z","last_seen":"2026-08-20T01:42:01.335747Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pz3d81gwxg.onlinebrandedge.de/api/status/7876","fqdn":"pz3d81gwxg.onlinebrandedge.de","domain":"onlinebrandedge.de","tld":"de"},"ip":{"addr":"172.67.193.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.777744441111h39939.com/","date":"2026-08-19T22:31:04.116Z","timestamp":1787178664116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinebrandedge.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:19:03 GMT","end":"Sun, 25 Oct 2026 19:17:38 GMT"},"fingerprint":{"sha1":"C7:E2:D2:E9:04:AA:4B:63:A2:65:0F:C3:74:DB:9E:66:E3:FA:D7:A0","sha256":"50:F7:8B:2C:A8:56:40:6B:04:86:35:FD:C4:7F:4B:A1:67:B4:53:85:33:0F:32:49:4A:70:A2:B8:86:63:30:A3"}}},"request":{"raw":"GET /api/status/7876 HTTP/1.1\r\nHost: pz3d81gwxg.onlinebrandedge.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.777744441111h39939.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.777744441111h39939.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 22:31:04 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://www.777744441111h39939.com\r\nvary: Origin, Cookie\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSYWYxwL%2BdHeCHLCdUFUI3i3SBliy1FL695w3HsOMWnj3R%2FJ4q0tKhewDydL5JfuwjjcR23Hu6AFIO%2BSWg3RckgXt1CYUkwn9f2TDofRQdMGKsd6Gz60Py79kX2pVm8%2BiEefFHPqEF43jaMxUomQAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dc9b3aba0a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":710,"mime_type":"application/json","magic":"JSON text data","md5":"1991b7c8ec390f5af45312fc0e09944c","sha1":"d61cf78973a9c26e718fb9fe1cb3c8533893d95f","sha256":"e83c12db5ee3c62282c295c521fa51a10e6cfff8e247c64f09838dbc134bd385","sha512":"80bed01bd6f8fecdcfe32308c4dc471907a48a7418c73be4874046c51c9bcf013cbc53bd0e4fc92afb3020d0c08fb675611712f81799a9a1bf593c4dfd8c8480","ssdeep":"","tlshash":"e9700022280800000ac80800e0000238baa0ca80002ba0c0280c80288820880e008000","first_seen":"2026-03-04T14:57:38.603599Z","last_seen":"2026-08-20T01:42:01.335747Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"pz3d81gwxg.onlinebrandedge.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"777744441111h39939.com/","fqdn":"777744441111h39939.com","domain":"777744441111h39939.com","tld":"com"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T22:30:41.622Z","timestamp":1787178641622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"777744441111h39939.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 10:55:18 GMT","end":"Sun, 01 Nov 2026 10:55:17 GMT"},"fingerprint":{"sha1":"B6:67:C8:4E:8C:39:D6:25:9D:03:E8:FB:EC:3E:79:F4:1C:8B:24:A5","sha256":"8F:CB:BC:94:48:4E:1C:F6:91:6B:64:EF:09:7B:6F:CE:79:32:8A:28:52:0F:CD:3F:F4:42:5A:B5:9C:98:68:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 777744441111h39939.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Wed, 19 Aug 2026 22:30:41 GMT\r\nlocation: https://www.777744441111h39939.com/\r\nrefresh: 0;url=https://www.777744441111h39939.com/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::sk7dv-1787178641693-1e6f86496576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":35,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"777744441111h39939.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.777744441111h39939.com/","fqdn":"www.777744441111h39939.com","domain":"777744441111h39939.com","tld":"com"},"ip":{"addr":"216.150.16.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T22:30:41.718Z","timestamp":1787178641718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.777744441111h39939.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 10:55:18 GMT","end":"Sun, 01 Nov 2026 10:55:17 GMT"},"fingerprint":{"sha1":"C3:20:61:5B:AB:D5:A6:FF:71:FF:C0:F0:C8:94:00:E1:F1:74:E5:F7","sha256":"22:36:ED:6C:4B:0F:A8:48:7A:F7:F3:00:B7:6D:F1:79:3C:5D:E7:4D:59:64:08:3B:21:AA:AB:B0:6C:9F:2A:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.777744441111h39939.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 745114\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 19 Aug 2026 22:30:41 GMT\r\netag: W/\"3011071e81b40e2633690e1375a4c808\"\r\nlast-modified: Tue, 11 Aug 2026 07:32:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jn5cz-1787178641769-acdca5a16ea6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9774,"size_decoded":4359,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9774), with no line terminators","md5":"3011071e81b40e2633690e1375a4c808","sha1":"b11148f0e1963edcdb04ec581f8c7355b923e401","sha256":"2d0810eaf9ed29e6df2df0e12085120ba83e36b46374aece6a91df0440b00d14","sha512":"55f189323c32aa3dd84104fd0663e81c8bf1308e42b2f3cc9f85d9606aa613a0fb13e41b0951dfee238e198cbc20edec551bad1d84a94e04ec390486731c71b6","ssdeep":"192:6tDPloTe24rMwpQYD3NMslHOs5v9e8ak+jpN3yyDyApnQSd7yZ:sDPlkepvD5EspepdyyDyApnQSd7yZ","tlshash":"1112d6b3b1851a39a06bc8e3b475a35f30b0c61ee9234614ddd8b270d8e1ef79976744","first_seen":"2026-08-19T01:13:43.812494Z","last_seen":"2026-08-19T22:31:09.941125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":17,"connect":1,"send":0,"wait":11,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.777744441111h39939.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.777744441111h39939.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Kali365 Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","kali365","aitm"],"meta":null}]}}]}