{"report_id":"8c4c2c1a-779c-4ad3-a407-82347a4b7b6a","version":0,"status":"done","tags":[],"date":"2026-09-23T19:55:25Z","url":{"schema":"http","addr":"tucandance.live/","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"104.21.71.155","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tucandance.live/","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"title":"Tucandance","dom":{"size":3431,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"64ebc25e8ea65792410d92718071842e","sha1":"bb92b17f56978a5bcc55d678738c8c3ff628d56f","sha256":"683e94cdd667cf0528fc42d91f9dcde0dc99cd6db171a9278bf22ec8fc0fbdf0","sha512":"e5a3a7ad39aa5a082bb53c68367a6c9fd824917a4c3486515846109c54350d1e345c0bee912486ae148e2a28fb3716bcb679228a979a855633e0d19646d23236","ssdeep":"","tlshash":"c061c222d4f978136096c09478b5be4f39429a4fcb050b5872bd12da2bd1dd7a8e36bc","dom_hash":"domhashcff6d856bdb329d69a0fd38553e34ccd","first_seen":"2026-09-23T19:49:51.423048Z","last_seen":"2026-09-23T19:55:31.258592Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tucandance.live/","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"104.21.71.155","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T19:55:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"tucandance.live","ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-23T19:55:27.154812Z","last_seen":"2026-09-23T19:55:27.154812Z","alert_count":55,"request_count":11,"received_data":2029167,"sent_data":5579,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-09-21T09:21:41.984507Z","alert_count":0,"request_count":1,"received_data":55890,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tucandance.live/script.js?r=418044128","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb99f4f811ec6d0cc2b3d8b5c873fbd7","sha1":"54a3360501afeb7db58c4f97141b3c83ae85104f","sha256":"45eced526afbc588d5176b787f221ae38da1bd447dbf16b271434a3c686ce0be","sha512":"ba13b9b6ff7f31059a8ec18bcad4b6908dbe1d4c6eecfb45306999e381ce3c2eb4e5e3853b9bd495c711e9eeb86547aa4a809c6503ce38c7373636f950a7db41","ssdeep":"384:mteG177alR/i+Tr02bWfim0BFiQrg11+iVjaXiini3ihiUhqV2y1iZAo4inMbCuC:mteGR7B+P02bWam0B83+iyoUhq8SoVnn","tlshash":"168274a6364d5639c3df336ab1395b81bcbcc1314a029454b86ccc6da870e0597eedad","size":17581,"data":"","first_seen":"2026-09-23T19:49:51.437207Z","last_seen":"2026-09-23T19:55:31.266138Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"hewoo!","filename":"https://tucandance.live/script.js?r=418044128","line_number":83,"column_number":10}]},"http":[{"url":{"schema":"https","addr":"tucandance.live/images/upload/taniec.webp","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.282Z","timestamp":1790193295282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /images/upload/taniec.webp HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3fc1a9f8c6f56af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\netag: \"b08e8-60394f803f465\"\r\nlast-modified: Wed, 23 Aug 2023 10:56:51 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxRH7VRfxY8FmoqzuxCVTt5IcEdXOq8vU1J6KRlJHqu%2F%2Ft9IzKhWqIKhTsHloQDDdonr%2BXV6uyKCu8AVeq1Q0ozlCDqISMuPyRRwtAGSkYAlQSws6p1T6ruRxFB2EBPewF8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 723176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":723176,"size_decoded":723882,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 5616x3744, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9fae26bd4372295e77eebc2786d7a726","sha1":"777cf6522bc33001883d63133d09ef84602ec3eb","sha256":"43b29631c63931e5ac87e938e4b4bfb1b732b5ffb1ea461f1f2c6cff51bbdd15","sha512":"e2feacab4ac018040ba100897f483b0a38035457ca859b40d39d001d1c98ddf3dbea6186f49ae7c52da78a16251ed033bc19b51080d7ba451e36d0bc2ea238f4","ssdeep":"12288:EvJeU9ryGrKauq2oF3jqTC86JZV7q4Ic2JZMrObZ9pZD26LXAgXyShH:EJeU9rkauB632u86PV7qfHJ6+pZzLXbZ","tlshash":"62f423b4c6216d4dad8a90384d1aebac3045e7a4d816453c7d3fa3e61e015c9ffe86f4","first_seen":"2026-09-23T19:49:51.443622Z","last_seen":"2026-09-23T19:55:31.260009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/images/upload/weselny.webp","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.283Z","timestamp":1790193295283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /images/upload/weselny.webp HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3fc1a9f8c7056af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\netag: \"83808-611a64fb88500\"\r\nlast-modified: Sun, 18 Feb 2024 11:31:00 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNFEoURLR2fHo57J9VDVz40bmT7lyDlDnqlF31O%2BrlcEHok%2FlJDokKXc4IlmQjrDeRbo1z8hE3BtSVXTDIWA1q%2BqxlApgAkgSfVoYPu%2B8uDaxqSObKhHUO1g%2BEBDRwu0Zjc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 538632\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538632,"size_decoded":539342,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 6200x4134, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8080b7cc62243ca7d80255c4418096d4","sha1":"78bb18ee2ef8b062f5801938b1ad841d848af853","sha256":"14af770372a2746375706e7f18d2ba8bca28ba6ce6b272ca8e62ff55bcf36948","sha512":"a70bbddef15f1a8a967f593b185e2a3c29b2714388221816e76bdba6fa6b0858fa1167adc896ba598f15a4d33fc7693db456e297df4082e0a8cb07653c377f14","ssdeep":"12288:wTflgNUzfpSDYznZkfONpiFTk5mbapwcL5DSIwtw+PghrR:gZzfpyYTWONkI5/ec1DSV7ghrR","tlshash":"ddb4234ce92a4b57c44c8d76c1755bbfa4a3f83192b79b2c5ba58d0cec42e1b8d1ac70","first_seen":"2026-09-23T19:49:51.446348Z","last_seen":"2026-09-23T19:55:31.260754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/images/upload/przedszkolaki.webp","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.285Z","timestamp":1790193295285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /images/upload/przedszkolaki.webp HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3fc1a9f8c7156af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\netag: \"8b01c-60394f7c4c844\"\r\nlast-modified: Wed, 23 Aug 2023 10:56:47 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsrBU6RlU2LRm6OG%2Bwv8YUMKIuwQ9BLmzCm2BVdJjDsonV3r%2Fj5Aq%2BPphxoyv5U8H3kVk7R1hSmsVO16GDlyzN42gyMcE99NvW7xU5l4e94B74Z2iJl82zw8snqPlYXNu%2FQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 569372\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569372,"size_decoded":570080,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2902x2177, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25de07f4550f676f97863547954583f6","sha1":"616d89ac764491c77b8ab512f108d01a6c388c7f","sha256":"eb21317cd15c408cf3b2414e0882a8a3a7dae50f20485e4b0de66335ea247ca6","sha512":"893da8785b0f96f1bc89db9ee61bc189af95bfb8e94f92b15e5310a86a590fc89b4fcfdb4d202a36a9c362405fa13c0532600627acacd5cf0419c17f6770e87b","ssdeep":"12288:bYzSQIQmNxJ003wbmeIT7pZPnep9bwgjBmcN024RkIGdop:bYGQIQmNxqqwivPnMkUmW02ykVc","tlshash":"85c43376378c7a6df4a389d9207416f457afcaf6429ba40711dc267c428cbc3af846c6","first_seen":"2026-09-23T19:49:51.448542Z","last_seen":"2026-09-23T19:55:31.261585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/images/upload/dzieci.webp","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.287Z","timestamp":1790193295287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /images/upload/dzieci.webp HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3fc1a9f8c7256af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\netag: \"842c-60394f76e7a2a\"\r\nlast-modified: Wed, 23 Aug 2023 10:56:41 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRdZFor9J89RRzOg0VSk9vz65vAIJQU4j0QrGbY%2BCXUTxw5JKa43wOqvZcpqQ6wOu5bodZonxipnHOaX71s0JxwK%2BlfZDlTTl3hTwN3uXUSI3UZdd3m62bAQqxf9SLB5zzY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33836,"size_decoded":34538,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4647d983885da032e6a48eaae6464a44","sha1":"612a959d4fc60fa6877e7bdd1c5e4b3571a94134","sha256":"2cc666b674974ebe452048fa5d773454f7a70c74e54b5ad54fd0cdd2b175ad93","sha512":"48269bb62acf78f1475fb8b20b77963afc7aeaf746538f3e5c65255f4d569c9e9319072ad3a9b10de0adeeb5259c2a357f3575ed1aec0af1641254da9c4ece3f","ssdeep":"768:sGjVtXoaAEWKiHTCivRpMH+zrDCqyHB6BLXdr1X:JVtXnWKEZvRrrDyHobX","tlshash":"fce2f2df0d73273319a6068fa78447fa1156cfdcfd642f253d89a932a8e53366c01a49","first_seen":"2026-09-23T19:49:51.450171Z","last_seen":"2026-09-23T19:55:31.262332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/kursytanca/sites/default/files/icon.png","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.443Z","timestamp":1790193295443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /kursytanca/sites/default/files/icon.png HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a3fc1aa08c8a56af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\netag: \"1b2c-6104554195c80\"\r\nlast-modified: Wed, 31 Jan 2024 22:23:30 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYn2h7OynX9NN09mLkSBUQ5wRywOwYeo32KNCMXApbUUPzGW2DNRGU12Kz%2B1RdkuUUZ4t5sb5XoOtYkg6lsa9uN0ydM%2Fs3skIgIvYrLotIKLNyB1tXAiskXDepW9Yvfcsvg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6956,"size_decoded":7692,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"04dfdbfd20e13ca8775eae7ad8758ba5","sha1":"8cad5beb7b60f3dcb6b74c70e39a0c99096dfb05","sha256":"bc515ed2a74dfd268d938801e8c106d05da23b687770c4c7ddbe58df45be8c53","sha512":"c7e73871567720009b4fd8a080c1043375337fc91f8117b65236c05d8e296c5b059fcded2d90b4a009412a8cf1112c4c849e5f4ed7dbafc4c70105a6f4afdb0f","ssdeep":"96:gF33IJ3eFtFk0Iq+zc/0Vat2w/gwdbU3tEkNbLjq6itKNg5Ipg7Fi:uE3wHkFYB4tEklNitKNzg7Fi","tlshash":"24e13bcec55330d2126dde6e60ec421b4d27c54ba8509ca7f5ff5dba4f402c20d65ba6","first_seen":"2026-09-23T19:49:51.433144Z","last_seen":"2026-09-23T19:55:31.263563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T19:54:54.484Z","timestamp":1790193294484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aH%2FivDLKtzIgE%2FIbQV9WOzV9%2Bdvs32W304J0I2VdOpGa7z1mrLhHz5Wo0pBGyw%2Bnsnfeg3EUKTHBpyM%2FGgJ4%2FakFTEYJpu3pqX1ww39yun2Xj8GEWTdcgzXFQtaCP%2BeKoG0%3D\"}]}\r\ndate: Wed, 23 Sep 2026 19:54:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3fc1a9b1c1556af-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3507,"size_decoded":1602,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"16403d97b7a2ce23f73445d4bec0d3e0","sha1":"a11d340e612a4418f9fe516c101ab94a3231c811","sha256":"8804757d142d8f7e73ed3e32b3c2ba44b02235ee43ed7d175d460fe621fb4c63","sha512":"bcc30bca07781e3eb42520fe63c1edf02d591bc5190f830650ab678ce0170687a4560def3f0dc36d5f2d9b3b69ed7c600843f4844e7d65bf53b81b4881782f96","ssdeep":"","tlshash":"8671d422d4d9781360b7c09978b57b8ef842468ec7054b1572fd23db2bf1e45a8e36b8","first_seen":"2026-09-23T19:49:51.434769Z","last_seen":"2026-09-23T19:55:31.264303Z","times_seen":2,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":68,"connect":20,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/style.css","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.010Z","timestamp":1790193295010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzEIJGGuCDWWvBaQBjreJdEMJgxgdc3nlzTocFNJBhAcGVXm9vHIH%2FrYLdxUUfeeJ%2FhzHW2PqvPqk1FLPX7aMpqgKuLS7dSfF0khgK22C9dProwGrh2xPl6pakgLfF3b4JA%3D\"}]}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3fc1a9ddc4256af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"e43-61106473e38c0-gzip\"\r\nlast-modified: Sat, 10 Feb 2024 12:35:23 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3651,"size_decoded":1884,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a5a2428ac2b8653af1a015255035003b","sha1":"c60cc06fa7dd1ca064f118867dabb51bd2a2e591","sha256":"fc9494e7e0ef88a5160cc1c60afb88731ce598229b3e3c0983aaa68e8b084b0a","sha512":"d68026d2f05c4965e4377118ff4f022510e3850e5f3e2f9735251cdf66ea0a07e26c62113751072f474f9df63648b62083c54ed79e2c06b07e900b6b0d6e677d","ssdeep":"","tlshash":"357143a58e66700ac713f7447ff01b69de74c020ee0b071eb8e27b1892d8578569e2ed","first_seen":"2026-09-23T19:49:51.436041Z","last_seen":"2026-09-23T19:55:31.26532Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/script.js?r=418044128","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.012Z","timestamp":1790193295012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /script.js?r=418044128 HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: text/javascript\r\npriority: u=2,i=?0\r\ncf-ray: a3fc1a9ddc4356af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"44ad-60418fbb60440-gzip\"\r\nlast-modified: Wed, 30 Aug 2023 00:26:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qokv%2BUZcPihHCMKooLGgw6SjwY1WAyBCL7hnLyW62ZASxpjSUN4rROJusA06o2ar01bR14uBxCRw%2BQSaLiADKNhLdNsI9KVXlH%2FP7bpl9wswGyQborlgmkPTNe83AK%2F7Pj4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17581,"size_decoded":5561,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"fb99f4f811ec6d0cc2b3d8b5c873fbd7","sha1":"54a3360501afeb7db58c4f97141b3c83ae85104f","sha256":"45eced526afbc588d5176b787f221ae38da1bd447dbf16b271434a3c686ce0be","sha512":"ba13b9b6ff7f31059a8ec18bcad4b6908dbe1d4c6eecfb45306999e381ce3c2eb4e5e3853b9bd495c711e9eeb86547aa4a809c6503ce38c7373636f950a7db41","ssdeep":"384:mteG177alR/i+Tr02bWfim0BFiQrg11+iVjaXiini3ihiUhqV2y1iZAo4inMbCuC:mteGR7B+P02bWam0B83+iyoUhq8SoVnn","tlshash":"168274a6364d5639c3df336ab1395b81bcbcc1314a029454b86ccc6da870e0597eedad","first_seen":"2026-09-23T19:49:51.437207Z","last_seen":"2026-09-23T19:55:31.266138Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/images/upload/balet.webp","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.289Z","timestamp":1790193295289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /images/upload/balet.webp HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3fc1a9f8c7356af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\netag: \"c1f6-60394f7afa9ee\"\r\nlast-modified: Wed, 23 Aug 2023 10:56:45 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyxOiMjQKjWKY4lI9bx85HvzqJB%2FGdQkf4hD9tI94U4COjLDbpxchsfjN%2FO4kDMeeiYr5UZq%2BkbNvczGsGkVvmG%2B4cZbSfncAYbf%2BjWSh02TRvVskafPfnS8SKeJSuh7jfE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49654\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49654,"size_decoded":50362,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1350x650, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cd092d2b0c0e7843f904fe3d4f94d32a","sha1":"34707f63925a58b50d54493291ec595c23a6a675","sha256":"a7ffbb777794cff2c95092e293c4be40deae48b7b59ad878e5b86a255bbbc275","sha512":"80f3d320bc9dccd02cffba8414df37e8892893b299b2d7bb1f13a036aa45479510fecddd8323ad3e7bb382cb73d851e9fdde7a2d07c987c3493c70baf07456eb","ssdeep":"768:78DrcUkZX0VpNCHt4suHAXKVmuNICeQbarXFL88LQ4RYeoAJ1ShZME:wcZX0VG4s7XK8uN7Dt8LQ4aeoAJ1S7z","tlshash":"98230253086021a03813a8edaf9c1457525abd4de727998eff39dffc31bc048269ca63","first_seen":"2026-09-23T19:49:51.426908Z","last_seen":"2026-09-23T19:55:31.266735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/images/upload/sklep.webp","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.290Z","timestamp":1790193295290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /images/upload/sklep.webp HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3fc1a9f9c7456af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\netag: \"c322-60394f7c61065\"\r\nlast-modified: Wed, 23 Aug 2023 10:56:47 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJHQ04TPvmqikXRwLQ6WUbx9fqslF6dUMESwkmPbdcmDnuVC6B2GqlwJhlpXe5SM26qWk7zO3HDBBfb88ywOZ4WQ3LeQk8BBysdngU19AdCnnnKfdHzlN8jt0uz8K%2F7UFOw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49954,"size_decoded":50654,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3816769c017c433078750fc29342a3da","sha1":"711e53cb9dfa2d997ff4e604ae2dd7e3fe578aa0","sha256":"1a77e1d500cd894ccba8da0fb0ad5560c4a8e54dbe8c1144468e34f29ff800a2","sha512":"8c04d8b91e6f0b4272fb2974bbf36a728ce9993bbae1bd8a0e63159d9b175e3452a957a556c7d4421e6fc28389abe6d07a27cbe67a12d2dfb91620e47a66e152","ssdeep":"1536:+hOedeQjOuEHWTSg8GhVz8s+bzh6hGR/CbY:+sQEezzYzUkR/CbY","tlshash":"6323028fdfc03479ba8929323d53dc89c1bb12b8878980a45ec739a4da3065d7d7585c","first_seen":"2026-09-23T19:49:51.430043Z","last_seen":"2026-09-23T19:55:31.267307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.8.2/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.213Z","timestamp":1790193295213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v5.8.2/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tucandance.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGljBd5hgb4HKivlw6%2FubVpzNYyVpDXM%2FM1mAVabjbPu%2Fi%2FuOqXp89cMEXI%2BYWXbcQFU2tgWf9eY15Eau4e7gYo7BmuzwV%2FkWHZ8T6fzjJLdvQwTFQ9laV1zXItFoQKjznjt%2Bo6x\"}]}\r\nlast-modified: Fri, 22 Sep 2023 01:45:57 GMT\r\nvary: Origin\r\netag: W/\"77cbad34e5ce95e70847b074e05faeab\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 551784\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3fc1a9f3b7456ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55183,"size_decoded":13466,"mime_type":"text/css","magic":"ASCII text, with very long lines (54998)","md5":"77cbad34e5ce95e70847b074e05faeab","sha1":"50ccfd672cc8d4d4cff476204509c2fd51907ffa","sha256":"06d6e10886ed7de5561acab1935bce1c46174baa9cbd0bcb319aa3b69594131f","sha512":"aea425b5746e1f1b4f5a192da406712c751527712899b9f786f93d3c78d5fcde43314627cca3c2d62dee6f49845e0173b1a64d789728134607ab48ff185b1d1a","ssdeep":"768:nuC31UP18Pq4/vnU6UHJXkQCZ/WMQyjJKX7I9sGsQz5:nu5PWC4/vYH5BCkgc7qsiF","tlshash":"bd430bb8e54c41c9a731c44fbf82b2bc61b6f73ce5914d95f00e691c2ad26a811c9fb9","first_seen":"2023-04-05T05:12:38Z","last_seen":"2026-10-14T19:29:17.994513Z","times_seen":5110,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":11,"connect":4,"send":0,"wait":16,"receive":-1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tucandance.live/images/logo.png","fqdn":"tucandance.live","domain":"tucandance.live","tld":"live"},"ip":{"addr":"172.67.145.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tucandance.live/","date":"2026-09-23T19:54:55.223Z","timestamp":1790193295223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tucandance.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:10:26 GMT","end":"Wed, 04 Nov 2026 16:09:06 GMT"},"fingerprint":{"sha1":"86:69:A7:46:FB:78:B7:67:50:71:18:08:18:F7:4B:35:90:9F:1A:70","sha256":"3F:26:8D:D4:D6:77:2A:2C:54:2D:11:0D:69:94:F8:40:E1:76:4B:B8:29:95:B7:AB:8E:99:73:9F:8A:C7:2F:E2"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: tucandance.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tucandance.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 19:54:55 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3fc1a9f2c6256af-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 342\r\ncache-control: max-age=14400\r\netag: \"61e3-5d8c1bfb2b100\"\r\nlast-modified: Thu, 24 Feb 2022 11:19:00 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=is55IX7KvY%2FFdF6XtnbcEPGLQz0VEbQzEimuD%2FFrCtBYGakF3zPwAdX72lP8f09TnDEnBFLtrxCNHTzvp9N6EUoCPze48jZZ0o0lL6TG4aDD8Ysyi4z8gd2MTxbU%2B8%2BSMLY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25059\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25059,"size_decoded":25764,"mime_type":"image/png","magic":"PNG image data, 664 x 231, 8-bit/color RGBA, non-interlaced","md5":"c069faa43ac8c8ecadc97694a5a08064","sha1":"28afd43472ad5f59dd463756d59a4968f68ad23c","sha256":"fb39b4adb8f04d758ae2093f8424980dc19b4c3767c712a610cbc911b25fa144","sha512":"b32299be733adadf05dcb90cafbb309fbec17622762f8004c25b51cb22a0887af58e7825b69e1b2076cae67e76a20a0f56c4caef6f2f9867a767736f4984c564","ssdeep":"384:zeTnAOtdOAq1WPgQ09KQrpwEVRjELXNJLWPyGJswnPbyw1A:zeTnAIdqA4nKQNrRjWXuaTG2","tlshash":"00b2bfabd5bb666e62d910cb1f2537abc8a7e283dd7b6802e458c0e166c70b68711c11","first_seen":"2026-09-23T19:49:51.439545Z","last_seen":"2026-09-23T19:55:31.268476Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"tucandance.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"tucandance.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}