{"report_id":"8a8df3c7-f944-4e4b-8741-482e18de6c33","version":6,"status":"done","tags":[],"date":"2025-11-20T02:27:49Z","url":{"schema":"https","addr":"9374.ee/","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":0,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"9374.ee/","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"title":"Bet365-9558.com","dom":{"size":4393,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0629ec6aab912f4f50b18ab5af4c5e63","sha1":"dd97cbff74bdd35713ac46b9c137aa8bb1f29a45","sha256":"3d145467026d6f5f273b2155c42025fe7c564f355997d165f7f477af20d43c03","sha512":"c19b8f79fa3e212f034cd44a178f301ce2bfd71292247b9aa08df63844cfd22dcda2768ca2823dc5a21ffc8a3d7484edc394c2f44001354271a3650de9a6f9d1","ssdeep":"48:1SMT0fk75iO0vNrDrOk7vJIJJx3vJkNu/6uPTSg1fPuAxc:1iO0VrDPv2Jj3vSNBuPPGAxc","tlshash":"8b918aa294f552a3414380806a763a1bbfe1da07da1f4900b5fd1be99fc7dc6cd1b41d","dom_hash":"domhash01a81486ad49e669c3f0ebb3cc695497","first_seen":"2025-11-20T02:27:53.57103Z","last_seen":"2025-11-20T02:27:53.57103Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"9374.ee/","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":0,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-25T02:27:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee/","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"9374.ee","ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-09-26","domain_rank":0,"first_seen":"2025-10-20T13:30:24.502455Z","last_seen":"2025-10-20T13:30:24.502455Z","alert_count":154,"request_count":22,"received_data":1131181,"sent_data":9422,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"9374.ee/","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d21aff985b7c022e2912cdde3e8dee0f","sha1":"5f06cf106ad1133f4306c992d3c4ea201d11558c","sha256":"f4c783537ede76e15457054f1983e0d9f3e4c2f4e6051531bbe16a44764ae6d4","sha512":"a65554b1764a1c4435a856d7f7f2898b1562dd4feb25614f13205b65da0fe21866d08fb5e8b1c447541f0b712ab60bce24508391426302cb9ab048de7606c35e","ssdeep":"","tlshash":"7fb09b4af05f5d515c56a1196f5f359569734c121d4c542af05d50245b160159c4cd25","size":123,"data":"","first_seen":"2025-10-20T13:30:35.005234Z","last_seen":"2026-06-06T17:28:24.645651Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/index.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"067440a9a1f07daa8ce55d1a7bf8ca9e","sha1":"86aba338adff8062fe9a290a42ccc2a7791bdd56","sha256":"27636631fd851a0972bff594e08f8c958a42b2a089e3c71a3e6e77f696d370a6","sha512":"dc31c74a58576e917546e3263abfe5881c1dbef29a7ba73306722cf119513c8afe483827e1fdabd75586ec5f7e11afb8d6bad7c40ff9595e3f1fd49a11b922cd","ssdeep":"","tlshash":"6c41416d76a1007323d339739b9d2258e1e8a01b440dda01fc1ed604afa7939b6edfe4","size":2230,"data":"","first_seen":"2025-10-20T13:30:34.998865Z","last_seen":"2026-06-06T17:28:24.629324Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"8c98d8c33c26553aa4256817fe8ea0a5","sha1":"d5883d38cfeadd9bf2540eec2694a882dd3db1cf","sha256":"b68b5477d135ce269d0ee801e3d8881c070c89bec240fffbdc806e3e6d66970b","sha512":"0dee025e18ba0a17c2be36bb9e467b0d041f862012f430c0d8c0bc6c270fdd082dd9c7e4652094464d39391b3266e6b48997e67b35e1b0aa1068a64db8ed76c3","ssdeep":"96:JXj9xqRS5PAABv0ZgpzNEXWLdbFE6Szwexlo9k+LDRkTkYzIS4RAE8p8NF/LJ2Ue:NBxsS1cupzNEXWh1SsezDgYzn4RAHpKA","tlshash":"27c119183182a87ac5ce9236484f524eb936715a659cc080e53adce4bfbcf4b9137f36","size":5860,"data":"","first_seen":"2025-05-13T06:59:48.254921Z","last_seen":"2026-06-06T17:28:24.647239Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/jquery-2.2.4.min.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-03T12:39:00.667809Z","times_seen":293579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/swiper-4.2.0.min.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"be15b3ba6a71edd608b9af34dfc6130c","sha1":"b11842fbe74778511b86bf899fbd02102b57ac62","sha256":"add18244c3d92cb789bd50456f05f02ca034c908bbf4210fedbd9013b3bf5d96","sha512":"ba9c83238efc0b5f43e2e85b104a2b1b010defa0f12d7c3cbff918fae76a7f3d3753ee18dead132729bdd0ae8a3854a481bcba35655dd37a6b6a03813d295029","ssdeep":"3072:6ShcwIktpnBohgZu7HgZsUOUFBWqJTq+NX:hlIktFBohgZu7HAsUOUFBWqJTq+l","tlshash":"65c3184eb390619510e36256565e9241a3b72809780ad0ac35b6cce7adbde4c13bfffc","size":119506,"data":"","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-08-03T10:45:56.438348Z","times_seen":14324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/tj.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a175a7d95e0cb7eccacfef5d36f63d","sha1":"3e52514c73be2838ca4221a00fae5c859234929a","sha256":"d8539e4601152cfb4f4ad7a27b8422d2624d9d8b9c955ba6768e9c746379f61c","sha512":"ee19558a0335f389e738bba4599b768b59d332afe1458f6989561967a853b522df945a77be67f110d879a05339d570a46472d0b558d4f7e20ec612a261052825","ssdeep":"1536:zab7c4ArjofL5+SuTbREYIk61nJXVxWR9:+erUfr5gD9","tlshash":"8253f85a72c2b13a9357b0719c8f4845f73dad29624d88898a1dd5e4b8b482cc37edfc","size":65166,"data":"","first_seen":"2025-08-15T05:45:40.070339Z","last_seen":"2026-06-06T17:28:24.627981Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/rem.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e74e945fcc19cbd1d5276e5d4548d525","sha1":"8236e3f3fc64916f9f7f65e8aa2680c9302f0858","sha256":"33442081f56c808935dba715de506e29ebf99eea4d997a64818edb9081369fa5","sha512":"a31082fa7c4afd5138b6f5048ea64b3fced8635505c69b56b2de5168b699069401b415f26eb42ed6ccdbc8e8c8db6f50618fea5890565ed5404f360176907245","ssdeep":"","tlshash":"8a01f166644125384b2b0009a925726cfeb7811303235283f45cae766fb0e430ab1fdc","size":840,"data":"","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-08-03T10:45:56.471339Z","times_seen":15323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"9374.ee/favicon.ico","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Length: 146\r\nContent-Type: text/html\r\nDate: Thu, 20 Nov 2025 02:27:27 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nX-Cache: BYPASS, Status: 404\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-03T13:25:44.329747Z","times_seen":546088,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/46cc85_750x696.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/46cc85_750x696.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad877-28909\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 696, 8-bit colormap, non-interlaced","md5":"d905aad79980ad905047c14b84b84ff5","sha1":"d0dec0dec88fe2195a542387ea611ab6bd7c1e5f","sha256":"de28c87b4ff2120c4dd0b25c546e6886f0868dcee48407852f03d47ec1b772b8","sha512":"8cbf7db9cac49eb7c6d820717e1e8e22f90490073f355d5c9ca49fcc3cf25b426e0a507f0162bea498a0b4cdfabcc3d0509efe90f3c7e083c688715b8376ac65","ssdeep":"3072:sxwXrcXaKDKnf4DRBcmsUT8zx1hOogvu65m0BPCGQJSEMVIIDQ8dFP:lrjKD6f47cmsU8x1hOogvuMm0BPCGzIE","tlshash":"20f323fe818229f38b628cb4d643d7b509d5403d681bafcaee4bbc445d38ec21975e46","first_seen":"2025-10-20T13:30:34.979561Z","last_seen":"2026-06-06T17:28:24.621107Z","times_seen":34,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":20,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/css/Swiper.css","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /css/Swiper.css HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: text/css\r\nDate: Thu, 20 Nov 2025 02:26:47 GMT\r\nEtag: W/\"682ad873-3570\"\r\nExpires: Thu, 20 Nov 2025 14:26:47 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:26:47 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13412), with CRLF line terminators","md5":"60a23d2c5b75975b1a2c21520e483352","sha1":"7ec5dfff3b6bd1a12fe64fb61c568c034ce354cd","sha256":"56c3dd16a5cf2ebefe0a3ee896bb3f20bc7b4327f75588188343c488d4aa951c","sha512":"de482c885d09fc675f8cb265c60d551928a23ad9924ede951197d8c743c99db75b8b397c37c07f4bfacb970b3ab9f676e0bca839438ba8084f4373211da6e4e1","ssdeep":"384:rLUbeQS7Rgx9BU0W/XCcif65W/1mXA82FHpx:r4b67gbhW/XDif65W/1mXA82Fn","tlshash":"e252236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6f98b9122eb95","first_seen":"2023-04-06T20:03:49Z","last_seen":"2026-08-03T10:45:56.449308Z","times_seen":11445,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/rem.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /js/rem.js HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=43200\r\nContent-Length: 843\r\nContent-Type: application/javascript\r\nDate: Thu, 20 Nov 2025 02:26:47 GMT\r\nEtag: \"682ad874-34b\"\r\nExpires: Thu, 20 Nov 2025 14:26:47 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:26:47 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nX-Cache: HIT, policy, disk\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"e74e945fcc19cbd1d5276e5d4548d525","sha1":"8236e3f3fc64916f9f7f65e8aa2680c9302f0858","sha256":"33442081f56c808935dba715de506e29ebf99eea4d997a64818edb9081369fa5","sha512":"a31082fa7c4afd5138b6f5048ea64b3fced8635505c69b56b2de5168b699069401b415f26eb42ed6ccdbc8e8c8db6f50618fea5890565ed5404f360176907245","ssdeep":"","tlshash":"8a01f166644125384b2b0009a925726cfeb7811303235283f45cae766fb0e430ab1fdc","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-08-03T10:45:56.471339Z","times_seen":15323,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":37,"dns":1,"connect":19,"send":0,"wait":20,"receive":2,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/7fe717_710x202.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/7fe717_710x202.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad878-5441\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 710 x 202, 8-bit colormap, non-interlaced","md5":"8a223c9fff1a8bd29ccacb8dfb24fa2d","sha1":"62ab9b8b02174c11e9907b68a30079f8fc01ccbb","sha256":"85304dce19823621f9044db009e0815c3178031b301eb467b8ed0f33d9319261","sha512":"a13e41633daee170f25e697348dde0f8df9ae3f9b6142734ee34f06380663cb4670def09196ad1bb14bd39838b27f84d75191ab30a487c3148546c9a2aa2544a","ssdeep":"384:xgFqfAQtRmhyFcEm/kFT2MSQ+gcRSwnI19LrYHKDGGT8m2MSKe7nZv:u0olhyFzTyQ+gcS9oEGa2MbeLF","tlshash":"7ea2d107d2aa6ea310d96e8940d1929e715d4d38c5f01b1ac4efbc4d397be76c3cb886","first_seen":"2025-10-20T13:30:34.992095Z","last_seen":"2026-06-06T17:28:24.617687Z","times_seen":34,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/740a8b_750x720.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/740a8b_750x720.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad878-2f2b9\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 720, 8-bit colormap, non-interlaced","md5":"3390be3e6d4c86e8467c90fcc3e7266c","sha1":"01400b21d96c5537a4b1b8652a08719fe6c26084","sha256":"21ef004ae0dc1b76de9efa000e31c54b52f2a5fc9ec182c5dece9fa0e5ec9038","sha512":"863f6f0cfe6fdfc55c6f565276ec069e61620e7457e8d7254263ff723fb696867baa5071cb5cf60717a022b45cb1173fd6b6254b2940e8735a3a7923f62431a8","ssdeep":"3072:4TDcgCoWX/B+CPK/nEOWOzDNn2siayui+9TUPrtwI6MTGUKJFS:4DWPB+2K/nzWONdI+9UzYMTGUKJ0","tlshash":"8f1423db50c0345662c82d8b5a1ba87ccf2279f7ec55ef5898ca1b23e1063edf687590","first_seen":"2025-10-20T13:30:34.995165Z","last_seen":"2026-06-06T17:28:24.637377Z","times_seen":34,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":18,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-20T02:27:27.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nContent-Type: text/html\r\nDate: Thu, 20 Nov 2025 02:27:27 GMT\r\nEtag: W/\"6915868b-108f\"\r\nLast-Modified: Thu, 13 Nov 2025 07:19:39 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: BYPASS\r\nContent-Length: 1189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":4239,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"793f905a76d47203d9ff52c80a443b04","sha1":"1308ecbe513dbac81604aac73917f764e2be998c","sha256":"3822299e4568d2eabe796f3ef7a58f32a524f629327d8d6c0b3a6767fc77cceb","sha512":"c6d510d5a231e093a4afd4baeb8a5f3f08a7d472ffb6cbdb44859e38a4f79b1fc9ba8053f844a9e6b612781dc77938d221f0f41d6f1af6547e8cde6577db3ed7","ssdeep":"48:0vS+cfko0vNrDrOkd4qB79Nu/6uPTSg1fPuAxK:GW0VrDKiBNBuPPGAxK","tlshash":"67916aa254f552a341838080ae767a0bbfd1da07d92f490475fd0fea8fc7d86ce4b419","first_seen":"2025-11-20T02:27:53.580678Z","last_seen":"2026-06-06T17:28:24.62416Z","times_seen":28,"resource_available":true,"data":null}},"time_used":1089,"timings":{"blocked":529,"dns":498,"connect":17,"send":0,"wait":19,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee/","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/css/style.min.css","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /css/style.min.css HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: text/css\r\nDate: Thu, 20 Nov 2025 02:26:47 GMT\r\nEtag: W/\"682ad872-1c9d\"\r\nExpires: Thu, 20 Nov 2025 14:26:47 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:26:47 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7325,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7325), with no line terminators","md5":"eacceb8f6474585ecab80d20fd88f791","sha1":"506ba6d1e0dd9b7819e3348b80841f7c33f297c8","sha256":"4281cac22f78d9fcb5842ad44992950d7cb36f0b510114fedcb71c4a4972f661","sha512":"eebcfe888435bed96aa7fe6d6a962b64a5698214df644a8a3786a3dea7313d4810bfb5ec69de1b51f513ead036c64791603d48b4605de60dab4a51b4e7cdbff0","ssdeep":"96:3zQdbEQFb+tree4IsYI9XJUc+s7zG2xkq2PQNFSeLj2KjMCLmDv28CJjHO/WOjEw:ztreVQb2V2amCav28ErVOcQ","tlshash":"31e196779a52311dd52bc6503dd45bec1138c112e303079de51b7a3ace8f1ab0ab2a8d","first_seen":"2025-10-20T13:30:34.988397Z","last_seen":"2026-06-06T17:28:24.642008Z","times_seen":34,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/jquery-2.2.4.min.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /js/jquery-2.2.4.min.js HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Thu, 20 Nov 2025 02:26:47 GMT\r\nEtag: W/\"682ad874-14e4a\"\r\nExpires: Thu, 20 Nov 2025 14:26:47 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:26:47 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-03T12:39:00.667809Z","times_seen":293579,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":38,"dns":1,"connect":20,"send":0,"wait":20,"receive":25,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/tj.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /js/tj.js HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Thu, 20 Nov 2025 02:26:48 GMT\r\nEtag: W/\"68bff725-fe8e\"\r\nExpires: Thu, 20 Nov 2025 14:26:48 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:26:48 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65166,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44736)","md5":"28a175a7d95e0cb7eccacfef5d36f63d","sha1":"3e52514c73be2838ca4221a00fae5c859234929a","sha256":"d8539e4601152cfb4f4ad7a27b8422d2624d9d8b9c955ba6768e9c746379f61c","sha512":"ee19558a0335f389e738bba4599b768b59d332afe1458f6989561967a853b522df945a77be67f110d879a05339d570a46472d0b558d4f7e20ec612a261052825","ssdeep":"1536:zab7c4ArjofL5+SuTbREYIk61nJXVxWR9:+erUfr5gD9","tlshash":"8253f85a72c2b13a9357b0719c8f4845f73dad29624d88898a1dd5e4b8b482cc37edfc","first_seen":"2025-08-15T05:45:40.070339Z","last_seen":"2026-06-06T17:28:24.627981Z","times_seen":40,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":1,"dns":1,"connect":17,"send":0,"wait":20,"receive":19,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/ac2ddd_436x118.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/ac2ddd_436x118.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad87a-2eb1\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 436 x 118, 8-bit colormap, non-interlaced","md5":"91614e5e6b89e00215101c2685d319a0","sha1":"1fe73124811c9324133811e5d84408c4c64310cb","sha256":"40b0d937bab1755c2e93a9d3ba7e63651ccdf1366cdce0cdb58223f3f4fd9dbf","sha512":"1c7629c54ce566004836ee2425718b5fa5f0f357bf362c70c3bd8109f044e59495e207b0c6c1712225b5617c3936b06de3816cedd41a6d3c57ab496dbb5bfe3a","ssdeep":"192:6pKgXWZZxDLF8ab2gHEdKa4OLq6hYb/kHqJ09XGO3Vi+qIZ5iDYtDueoJnJFhGlb:688WZZoab2BdKOLq6hYb/krz3VxTZ5mi","tlshash":"bf32bff90bb98d26fff268556591353b0e20030d6170e64cf7a8d6051121dcdb9e5fea","first_seen":"2025-10-20T13:30:34.982803Z","last_seen":"2026-06-06T17:28:24.639784Z","times_seen":34,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/swiper-4.2.0.min.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /js/swiper-4.2.0.min.js HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Thu, 20 Nov 2025 02:26:48 GMT\r\nEtag: W/\"682ad875-1d2d2\"\r\nExpires: Thu, 20 Nov 2025 14:26:48 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:26:48 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119506,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65273)","md5":"be15b3ba6a71edd608b9af34dfc6130c","sha1":"b11842fbe74778511b86bf899fbd02102b57ac62","sha256":"add18244c3d92cb789bd50456f05f02ca034c908bbf4210fedbd9013b3bf5d96","sha512":"ba9c83238efc0b5f43e2e85b104a2b1b010defa0f12d7c3cbff918fae76a7f3d3753ee18dead132729bdd0ae8a3854a481bcba35655dd37a6b6a03813d295029","ssdeep":"3072:6ShcwIktpnBohgZu7HgZsUOUFBWqJTq+NX:hlIktFBohgZu7HAsUOUFBWqJTq+l","tlshash":"65c3184eb390619510e36256565e9241a3b72809780ad0ac35b6cce7adbde4c13bfffc","first_seen":"2023-03-07T12:23:57Z","last_seen":"2026-08-03T10:45:56.438348Z","times_seen":14324,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":12,"dns":1,"connect":17,"send":0,"wait":21,"receive":23,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/cd18b7_652x822.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/cd18b7_652x822.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:38 GMT\r\nEtag: W/\"682ad87a-255ed\"\r\nExpires: Sat, 20 Dec 2025 02:19:38 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:40 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153069,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 652 x 822, 8-bit colormap, non-interlaced","md5":"9396c1517e74642643127a3268d1ddae","sha1":"dd322c64e9635085f3b62f4560f5dac7090f2744","sha256":"f78f8b02f6992ae57b3b00619f562e07a2efb93422babce41ec5b58447dbe595","sha512":"bb1048b419422ebf64148190add294c4deaf423dde928f9ef1d17c6a756efe11df0cdc5990ff0006318a9e7e09198b11a205c190c6e76c10c643d9b58de1d981","ssdeep":"3072:laHQfB6ES7Pt/qB89PVgKXLg533CFBARCDlmKVoYGDehkJaSb:8HQfBkB/qiVXU53y3pmTdaK","tlshash":"fee312e01ad7bd04e32ff596be307b0112ca612bd5649c0904c5acd2f27e1a562ae7b7","first_seen":"2025-10-20T13:30:35.000534Z","last_seen":"2026-06-06T17:28:24.644071Z","times_seen":34,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":18,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/862b7f_736x52.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/862b7f_736x52.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad878-ae1\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 736 x 52, 8-bit colormap, non-interlaced","md5":"43008771189d35c4e530b2e45ce4ae75","sha1":"92951a09090757c1c2336aef9f9049757110c578","sha256":"f677d2330991facc8838e8edd9c25c4130cdc968d6573c6e0feef30ff9848027","sha512":"4c2ea82b3e10feffc191f03ad47d9e8382ab7b5657348254dcf773adb0911456df66c7e14a79c39a9ced7c95c5e58e5ea08e0e30452816a83073e2d1df9e82d3","ssdeep":"","tlshash":"58511a9e432d0761f86f6c3c9628bce2a029bd3c6dd25e6443d40b5090e4c52c48b718","first_seen":"2025-10-20T13:30:35.001799Z","last_seen":"2026-06-06T17:28:24.634897Z","times_seen":34,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/072fb1_750x552.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/072fb1_750x552.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad876-1c87c\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 552, 8-bit colormap, non-interlaced","md5":"a2188678e8c4f90152279c8a5b73eff6","sha1":"e7cef3a923e327f975f6dc0692adeb99c507efbb","sha256":"1c2d0acb2e137b6db5e7c8853e274fae04ecc797ad71982ea57fd7535e9ecf45","sha512":"3c7b24cf29a9f3fb95d6218d63d3015a3800dbbccce40754f04a96772711e5d6f7665c7f33f4d946bfa702e6ebdf620d993e57261d557f6a821df4f045767830","ssdeep":"3072:i7hmqBvV+oA3ufPlmmEdIHX4Xk8fEgCOEedTyro:ihvV+oQufPl5EKlg1phyM","tlshash":"ccb3128788fdb8002bb73a835929783c31542fd567da5261cf69cbf6df69516ae30320","first_seen":"2025-10-20T13:30:34.993607Z","last_seen":"2026-06-06T17:28:24.635996Z","times_seen":34,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":20,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/932f2f_124x192.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/932f2f_124x192.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad879-21f3\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 192, 8-bit colormap, non-interlaced","md5":"5592c53df07bfd1006ec20c6c688739d","sha1":"cf67d4adf44592c195f98eb4d9a52c8b3a7eb241","sha256":"e22e208dc347863431ec44f20e8bfd3eee1230bcb4449bea817f58517573cb57","sha512":"559551e2e104333bcf7636e102de676be0f62f1bc57593a2cefec923dd4b4a0eb04a0536f238bbfdfb222093ee228fd820b3600be514e6d0ccf80125410ab872","ssdeep":"192:x4uBt941okVwSCRKFM9T3Unjksi7bhrOll9hm5voyxQjP7jI:x4gt94ukVwhwM9T3UoN7bIl9hGQz78","tlshash":"69029ea6d03d5a534091d7a9bbb0e0f4bd8f359ee019d1e37043884eee98986c065a7b","first_seen":"2023-05-25T05:17:28Z","last_seen":"2026-06-06T17:28:24.626551Z","times_seen":121,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/js/index.js","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /js/index.js HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Thu, 20 Nov 2025 02:26:48 GMT\r\nEtag: W/\"68bff725-8b6\"\r\nExpires: Thu, 20 Nov 2025 14:26:48 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:26:48 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nContent-Length: 1161\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2230,"size_decoded":0,"mime_type":"application/javascript","magic":"C source, Unicode text, UTF-8 text","md5":"067440a9a1f07daa8ce55d1a7bf8ca9e","sha1":"86aba338adff8062fe9a290a42ccc2a7791bdd56","sha256":"27636631fd851a0972bff594e08f8c958a42b2a089e3c71a3e6e77f696d370a6","sha512":"dc31c74a58576e917546e3263abfe5881c1dbef29a7ba73306722cf119513c8afe483827e1fdabd75586ec5f7e11afb8d6bad7c40ff9595e3f1fd49a11b922cd","ssdeep":"","tlshash":"6c41416d76a1007323d339739b9d2258e1e8a01b440dda01fc1ed604afa7939b6edfe4","first_seen":"2025-10-20T13:30:34.998865Z","last_seen":"2026-06-06T17:28:24.629324Z","times_seen":34,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/f0806f_750x822.jpg","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/f0806f_750x822.jpg HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/jpeg\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad87b-899d\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x822, components 3","md5":"cab451d35b205065ad2206203d69c92f","sha1":"16e6f430b008d0e42c852290e3ec37eed9fb14ca","sha256":"643e947ce2d2bb0baf2561da127183d94d32fed8b6e1bcbed7e4a5543125ac6a","sha512":"27d9d1495df8d7649d09dbb9511bee196e9bcaecfaefbf1602b78592fb096d3ac2a444272d26998b6ff148dc1e9bb9f8813193dca7ee0a3d181ae1b396118b9e","ssdeep":"768:GltgfcQRfe3YfYui4q9ksqJXLXRF3f1JHBXMTJU0M:Gqca7Yui4q9ksqt1FP1JQJTM","tlshash":"28f2e07b929b177282d7e0716735f3a0a4734ea1d112027f68c32f61f06457af9c96d2","first_seen":"2025-10-20T13:30:35.003811Z","last_seen":"2026-06-06T17:28:24.630927Z","times_seen":34,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/css/animate.min.css","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nContent-Type: text/css\r\nDate: Thu, 20 Nov 2025 02:26:47 GMT\r\nEtag: W/\"682ad872-12a90\"\r\nExpires: Thu, 20 Nov 2025 14:26:47 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:26:47 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"9d99b1c597a52a1a68d063308f1de662","sha1":"90dc56142980365936e75aa7c32faf92930694cc","sha256":"764287c1363d6895c6e4dbabaa80ddba43f68dfe8557e6fe9b6c7767b4db1eec","sha512":"e2d5848a4f378ae0d1d5f149829672cccf82082504ce258a50486ddc6a3cfd2631866e852454c29d38ee58d0c3245e633c457924549db4ab5261831b124a3c6a","ssdeep":"192:xIQHnGg5p1sgqg501K7JuFRH2UNURV2/o6R7M8EA+UQRjMsEu+/6QI3iiFIFibTg:xIWjy","tlshash":"db73e9a928a211445727491587df4f78663ce5a31826ecfab3de588b8f01fac23cd617","first_seen":"2023-04-06T20:03:49Z","last_seen":"2026-08-03T10:45:56.465164Z","times_seen":7394,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":35,"dns":1,"connect":17,"send":0,"wait":17,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/0f6543_750x120.jpg","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/0f6543_750x120.jpg HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/jpeg\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad876-73fc\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29692,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x120, components 3","md5":"a3ceeccf08c7fbe079629d514e618fa7","sha1":"e089fa3b52f9a7362bfbaa336f1e88531dd34c4d","sha256":"f69e9c0c712d471c122b13a072ecff361e207ea36fa659ef4fb0d5d51f5fe011","sha512":"79d4d8cfc8b7e21c37bec0f934d0be259188589570b715c8bee2cda1a3dfaa3bf4f8d6bde5f86a81cf7783501f860f74e380ebd9569dbb7f572c01076aab88c2","ssdeep":"384:flW7YCH3BfTd7MRDCb7Xt/LmfAMbO8KZH8nhee1Z3zIOxpxz6ZN2TOQP4Vdnp:c7jHr2DsXt0ASOfWhee1Z3tNQN25P4p","tlshash":"d7d2f14e00892e80fdfc863e574ad85bfd947e94328fd728b12328223dc647d678e469","first_seen":"2025-10-20T13:30:34.981158Z","last_seen":"2026-06-06T17:28:24.638506Z","times_seen":34,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/543e5f_200x64.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/543e5f_200x64.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:41 GMT\r\nEtag: W/\"682ad877-e2a\"\r\nExpires: Sat, 20 Dec 2025 02:19:41 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3626,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 64, 8-bit colormap, non-interlaced","md5":"6b3211a71763e5cac8807c612fb4af52","sha1":"5cd68f5dc1db866c6d729c7721c2fa3e453c32cc","sha256":"38a1ba87873f6a769efebcb4d554404182a83cbf3cd8d48133bd8416dde211f8","sha512":"6882f748933948e3b4d1ee73e0da21bf150c8eb7c26baf841ffc29c3b023fadccd595df87fb0d4a9452837a397f30b29363e879a240cf4c37905ab640401df6c","ssdeep":"","tlshash":"1a716dceb60255359f3de237b98d6b23624532b3666041cd04c26afb6b1767cb090504","first_seen":"2025-10-20T13:30:34.984911Z","last_seen":"2026-06-06T17:28:24.632225Z","times_seen":34,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9374.ee/img/9ab803_220x76.png","fqdn":"9374.ee","domain":"9374.ee","tld":"ee"},"ip":{"addr":"77.83.240.177","port":443,"asn":49870,"as":"Alsycon B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9374.ee/","date":"2025-11-20T02:27:27.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0633.ee","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:8C:63:13:53:03:6A:04:AC:55:07:1A:DE:9D:A3:A4:3A:1E:8D:01","sha256":"57:DD:CB:BE:02:7E:35:89:73:48:BB:19:A5:66:FB:9D:12:72:46:1F:62:C9:EF:1D:E0:24:30:26:3E:00:B2:DD"}}},"request":{"raw":"GET /img/9ab803_220x76.png HTTP/1.1\r\nHost: 9374.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9374.ee/css/style.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nContent-Type: image/png\r\nDate: Thu, 20 Nov 2025 02:19:40 GMT\r\nEtag: W/\"682ad879-12ea\"\r\nExpires: Sat, 20 Dec 2025 02:19:40 GMT\r\nLast-Modified: Thu, 20 Nov 2025 02:19:41 GMT\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 76, 8-bit colormap, non-interlaced","md5":"2cceec560e16a6e17a3b8da5b524b68d","sha1":"0388ae08f6163cdfb60f6429ca1bba1aee3b7685","sha256":"e428ed61303315b0f3bfdb56b246206b4d18fcb3faeaec1d4c86b11f77a4d761","sha512":"8dc8cc083f58ab21dda7bac9b9b5ab267e061f7571e4f456cc7850e52bb30c40ba8b40109a04b8cdbf493f16d118d6a881598f12cb943de0c4fcac25824760e0","ssdeep":"96:wIBCJtzRTQwPcqUiEEXDzlWu+Z82z2toK17rYZDYn38ENsSfEbMc:wIetzRkwPcqnXzlmZzEd0cn3xj8b5","tlshash":"c9a16cef63d025f4cbfa287ea09ce552462fa778f155c4478b1220d4eca641af88ce95","first_seen":"2025-10-20T13:30:34.986878Z","last_seen":"2026-06-06T17:28:24.622647Z","times_seen":34,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-20","alert":"Phishing Block","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-20","alert":"Phishing - Bet365","trigger":"9374.ee","verdict":"phishing","severity":"medium","comment":"Bet365","link":"https://openphish.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-20","alert":"Sinkholed","trigger":"9374.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}