{"report_id":"8c7509ca-d6fc-4e12-81bd-6b656952542c","version":0,"status":"done","tags":[],"date":"2026-09-07T01:59:54Z","url":{"schema":"https","addr":"app.daomoker.com/","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"172.67.171.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app.daomoker.com/","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"title":"Home | DAO Maker","dom":{"size":1186405,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7578)","md5":"b0458c85dac0913f3402239026e87da6","sha1":"5878383a5e33a66001c7b5b1ac7a3dd8ed420d70","sha256":"103120e710088f81b1c720660df5bdda0e0cf7290c53fcb91640a235c572b597","sha512":"8cf4aeab9f0b19b8a9765bbf4f53c5c416e0f711b50a3336bb37e42152495a5e0fc808f4e4dcc790dacce6bb6bfdac16d34df72f8d5d7bd701663a48890afa25","ssdeep":"12288:RXsFCelGVrWqPQ/rQxJkcEeM/rQxJkgcBpe+AngbX:R3eUArQxGZrQxGgipXAngbX","tlshash":"664519f023780e776087c29de7747ce76aaaae93d9874448736e0ae45bc7cc9d907580","dom_hash":"domhashe5776cc8b4747ac298cf2ab4abf037bb","first_seen":"2026-09-07T01:59:30.442659Z","last_seen":"2026-09-07T01:59:59.970629Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app.daomoker.com/","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"172.67.171.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T01:59:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.daomoker.com","ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-10","domain_rank":0,"first_seen":"2026-09-07T01:59:25.681356Z","last_seen":"2026-09-07T01:59:25.681356Z","alert_count":17,"request_count":17,"received_data":15664516,"sent_data":8470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":9304,"sent_data":607,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.daomoker.com/","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ef4018febb77a6679d83ff4491db5b5","sha1":"9676aedb9dd48731c7d80e959072a3b782393712","sha256":"d45eef8ba1af60b067288ba50fabec84b545d7ffde70ca84d795f2bd5d7e5604","sha512":"40f923453a2c27a07fb4aa8409a42f30f2b75d93fb802ba91fd71c9240162316ff5d1dc3dc5fb7814b3f28d6966b23ec44b62e4f1f252dd7362c18075c95c9c6","ssdeep":"","tlshash":"03e0c21a34c6503a12b795aa33b7910a2526370bd49ecb127a5fc9a65f24ca5058664c","size":303,"data":"","first_seen":"2026-08-01T13:18:12.515139Z","last_seen":"2026-09-07T01:59:59.986313Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0f7a8ee2567f4a678a1097971edc1b8","sha1":"1197f219bb2e9a7b6d66fd57563b73d8efedbd5f","sha256":"98a6bba81b5ebe8fb8081e728380685c69bc88ac73515cd90728dc3464afd8c2","sha512":"eeb8f801b265b8a78d093d2d3471a982bc48346943970e10b288ba7b9b50d191edd560d0b699d8f3671f6681f27aef358df9a0c349a21d500500452b7e04b270","ssdeep":"","tlshash":"c57000080b28a20000a800000a8a33882002a8e282800003202cec02200c803080abc2","size":24,"data":"","first_seen":"2026-07-20T20:01:00.337843Z","last_seen":"2026-09-07T01:59:59.986843Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/jquery.min.js","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-20T13:49:08.042698Z","times_seen":195601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/main.js","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b0512744f730a78a2942718423cbb84","sha1":"8892891c40300505fc5cc3d4a0b605839214b237","sha256":"7693d6cf4742afc34a617c77451ea655d9d1893ef8ad241fc083aa14e9be7a76","sha512":"d92f2cc63d0fa7596b4a76f393a722a712d4dd9a869d77130fc07bc386d0ee346ff5904a89319d2fbfe2842ed586a2cb995ea170e563a271b02d9464ba5707ef","ssdeep":"12288:jKIm6sFCelGVrWqNQ/rQxJkcEUM/rQxJkgcBpe+/ngaaKh:jKImKeUKrQxGzrQxGgipX/ngaaKh","tlshash":"2f453bf023780e766087c29de7797ce76aaaad93d9879448736e0ae45fc3cc4d907580","size":1255697,"data":"","first_seen":"2026-06-25T10:33:59.891946Z","last_seen":"2026-09-07T01:59:59.987556Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.daomoker.com/css/main.css","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.289Z","timestamp":1788746360289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a5121e6-9133\"\r\nexpires: Tue, 08 Sep 2026 01:58:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ieKNnHUKahNbHUGEPIIJFPuaJ8pcR%2BwFRBM5lTrwG6q3CCrq4w%2BhqKH0SLDMgRPQhiCcfJGHeafibknKXKlzGfRdOw0Tp7l8j9lGsFH5mxmeMa77DMs4YWQdEgE7PFZgwtp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d0fdb03712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37171,"size_decoded":8692,"mime_type":"text/css","magic":"ASCII text, with very long lines (10477), with CRLF line terminators","md5":"a8f82455d7ffffd8cc4f0ec130a2661f","sha1":"5999d8eaf14fa5f892c9cd1448a41405d6cbdf42","sha256":"f796afa92d308aca015c7b39fa2aaa098d82e185480594b62c02eda7ca8aa686","sha512":"b9d9ec5a3960f1a95cf80d8776119a4f745ddf99ce3ccb88e28cfd6c29f8b172ac9adac9ed132dd40ee634724ac3dffba61751dfbf8d0c144736c22c0de527ff","ssdeep":"768:f4vlTtsuVEnD1DpIXB1uZN7I89yBFMFkxlsq06poicVx5dmBXw8:G20xJxXL","tlshash":"72f20814b7d340371d2be4a296d9b5adda0fa8866d3312def69102643fc2bfbc991610","first_seen":"2026-09-07T01:59:30.454829Z","last_seen":"2026-09-07T01:59:59.972126Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/main.js","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.295Z","timestamp":1788746360295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a5121e6-132911\"\r\nexpires: Tue, 08 Sep 2026 01:58:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OClTkAtzY1zlQ1i14afipm3RpsqN3BcbBnePzMgQvT%2BoufRw2BcpymyGO3ZPRRIoKkXILcvEZgy9Ny75VDkZXAHq0y%2Fe6GeYp2SRs%2Bq4SMPKl4s1gMCooy63xytbaNwEwMp%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d0fdb06712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1255697,"size_decoded":449880,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7578)","md5":"30a31395fe66478bb66b2b84c833e5d6","sha1":"35c673b309c56a508566034bbdd8bdec26278996","sha256":"8b95216b3016e41641f9e28415008981bafa24728dd2995518e762c79dfecd0f","sha512":"fc726fcaa12cabbedff192fec75eca988d0d54fd0e3dbf8217b2e0f01189e97bdd37f16ecd391a479604774e023c1f9167947951045ed12e567f65bcae9bd17a","ssdeep":"12288:jKIm6sFCelGVrWqNQ/rQxJkcEUM/rQxJkgcBpe+/y:jKImKeUKrQxGzrQxGgipX/y","tlshash":"5a252bf023780e767087c29de7747ce76aaaad93d9874448b36e0ae45bc7cc8d947580","first_seen":"2026-06-05T05:29:41.058421Z","last_seen":"2026-09-07T01:59:59.973145Z","times_seen":20,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/images/logo.svg","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.301Z","timestamp":1788746360301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a5121e6-49e\"\r\nexpires: Tue, 08 Sep 2026 01:58:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVbGA8AWjdvZnjDGrMU8XpAaiMxK4AIRVwGwaOLY2b5MnLYjnRar16Z91y7AJEV3CpWuS3v9IqdWERGwMzFc7wngLn4dXl0Rz6PUll3kz%2BA3bJBKbsPTjGKc95gIX7yv40bP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d0feb07712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":1224,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee8aaec203d99e578684f8feeaca4881","sha1":"01908e9a2afd6cb25ef141d046daa5cde27aa48c","sha256":"2c1d01e40160b54d6eccf518f04ccc572adb0aa56ef1aeb27f181fe6e7ef0ea4","sha512":"5eaaa818940ddca43ce4ba9de240892fc195194c2f63b06dd34483f95f3e099c87284a6bfe4219d52c5720bbc50aace6f4fe7352a7cd678404048ec612c44b22","ssdeep":"","tlshash":"5621e13aa56acc77f678c4bcd48ac47c929a51e7c6c64150d1c1bf1f2861ac20ddead4","first_seen":"2025-12-21T06:03:08.447432Z","last_seen":"2026-09-07T01:59:59.973788Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/fonts/ee40bb094c99a29a-s.p.woff2","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.454Z","timestamp":1788746360454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /fonts/ee40bb094c99a29a-s.p.woff2 HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=3,i=?0\r\netag: \"6a5121e6-98f0\"\r\nexpires: Tue, 08 Sep 2026 01:58:48 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OAO2Yl5UhsiHqhEZ1ebAOcWLD5pG2bfm%2BkVHjTP%2B%2FSj9n3NeCCTXtwd%2BucC65bOMDAQ2L60ueHxbMABJF3rJOCuEV8mvtOKJjC3FcvGL9vsWOxqVHfpO0xPlW8FQFB%2Fw7BQi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d10db11712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39152,"size_decoded":39895,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39152, version 1.0","md5":"acfce21e9f6eaf62a1058b502b920e06","sha1":"c67f96573543ec91b416b0da07f979f80b89b6b6","sha256":"20fc9b6fc618e7c3c68d3ac750a2a5dfbceb8521675458d2cea580b5693e4798","sha512":"213daf669f64b3d1c2e86311afdb173873ee379bccd1e7c2a891bb17cd5f0c01e485bbed331b34aeb8cf0ff7b8962fefa136533e9b9218174eb6a72cf3c5eb00","ssdeep":"768:8oje8HA6B+ldUVqnpuc8oq8OlKJZejd5sSuSbccIeC8MQ:8oy8Hf+DcqpWo3OWZc/sscccQ","tlshash":"a603f13825463274fa888f297b2485859d2c3cd68d25e9339cefa35d2302d7915bbdec","first_seen":"2025-09-17T21:27:48.949651Z","last_seen":"2026-09-20T12:28:54.283167Z","times_seen":4060,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/images/farms.png","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.614Z","timestamp":1788746360614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /images/farms.png HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=5,i\r\netag: \"6a5121e6-11760\"\r\nexpires: Tue, 08 Sep 2026 01:58:48 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RzzkD1EEK1x6DZZmHhBVztEDCK%2FmXxr8MCiYdYb0uLZXBGvzAx4NBktNnJTzJKqujahUSsqHr3i2I%2BxjE1T4k7tRe6vYyc6naSOXUqjat6KXX43BzVU578MXZ%2BQcaqEtlewg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d11db1c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71520\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71520,"size_decoded":72256,"mime_type":"image/png","magic":"PNG image data, 275 x 149, 8-bit/color RGBA, non-interlaced","md5":"e6b95b22a318af4a738594c336a4e509","sha1":"78de578a66a4e5d863dfaf817dbb67d2ad763f8d","sha256":"904540bc853be7a830bab2254373619e9805af5c951a4e063ec9996a679fc38f","sha512":"0bb531c3fd424f80b73a326842e705da07b379524e0a9500be8352e29057cf1d4a7ea683bf82322b865b2c3b70b8a914581b5c22b5186cc53c3979c6ed01338d","ssdeep":"1536:D0BblMkjixViXNHxbyTdGX0UuXBNVkAO5reXfRYoFNH/UZJq/gkp1J:D0Bh6VidHxbEG7ulKeXacSJq/gkp1J","tlshash":"3c63122b2d4e02e0e5bcc1ada0361b3fdd057e3bb7a926d27351be9610dd134630907a","first_seen":"2026-09-07T01:59:30.443949Z","last_seen":"2026-09-07T01:59:59.974897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/jquery.min.js","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.294Z","timestamp":1788746360294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a5121e6-155ed\"\r\nexpires: Tue, 08 Sep 2026 01:58:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyLh4T8zvaWecn2xgAmW2M7hnMKgw2Q5UcJj3ZQpMBRtLeWtrxBDdAau4%2BQm1tMgVpV3Q5NKBoBl%2FHQ63pC8ZOBK6zKI%2B%2Fap0e%2FivVzEgOgVfUhmlnnx0x35tmJ%2BaYq%2BGulQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d0fdb05712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":31391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-20T13:49:08.042698Z","times_seen":195601,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/images/pattern.png","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.445Z","timestamp":1788746360445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /images/pattern.png HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=4,i\r\netag: \"6a5121e6-1c430d\"\r\nexpires: Tue, 08 Sep 2026 01:58:48 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IywwH%2FKJbvraXrooIGaWQcHHfTyP7nBz4SqQZqu%2FdeJ%2FYTCq96RW5CSjYQPeWhCKnuagB3RSCJPx9lsIpWcDJJeeq%2FQU7nYkAbRbxGzADAH%2FNr94GZ4zSVhlZMtnwNrVRwDf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d10cb10712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1852173\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852173,"size_decoded":1852916,"mime_type":"image/png","magic":"PNG image data, 3770 x 2120, 4-bit colormap, non-interlaced","md5":"a5d229bfa4ef63478d421e7358c51760","sha1":"1ebb6bb1cbf2409b406ae72499ae459150993314","sha256":"66d7f371326bc2a5ba4ac9f7441bf09fdeed5c2263c706b66a9923b133796d90","sha512":"10685c9504b7df3eeabd0d4049697dda08b5f91b2328fe43e805ac97bb835902c2734c90bc47418db9a8e6e22d32317d09cf4ca4018a8b7369b3c3b0ded36fa7","ssdeep":"24576:Gav2s+r64tpLeInOUqpAT9Tr9ve9f9g0QrDmbFYKLSdrB:3v2s8nPiqd+QrDmbF5SdrB","tlshash":"8e2523cffe2c1c71cf1f873e47768db414e3ae56ae7ec86486091aa5e0554b0a6703a0","first_seen":"2026-09-07T01:59:30.449013Z","last_seen":"2026-09-07T01:59:59.976165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/img/light-2.mp4","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.605Z","timestamp":1788746360605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /img/light-2.mp4 HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6a5121e6-421563\"\r\nage: 32\r\ncontent-range: bytes 0-4330850/4330851\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYgtlSB0054o0V1erUnmZXjxe6EKPv7uAv12IhHOt%2FVcWByksbnOoPA%2F9wb7wJV2F24EEtW3b3u5NujEr3FK9U0boHG2usJ1oPFz8DQWEVsVT6Av7YTUSt2GbZJRn7rWSEtv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d11cb18712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4330851\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4330851,"size_decoded":4331569,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"c14f9dc187dee405ac7cebd092113c46","sha1":"aeca514bee983ed62ee9b7faa76f5d951f6a2d8a","sha256":"5d7ef1e1cfe680d373e3d4a25a7ddf26f710604c671c6d2f7ed09ac898ab9bb0","sha512":"03ba26a78b5c86af11fce1432f268493d8a7fd2f62a98b8633a016b9cee32425564f36be7159f52d7d40868c5d9ed3a9114961c9782f468ae731e857191e5b6c","ssdeep":"24576:nL8kzkQ7B1E/BPD7gihT9V3S0OBQdAVcGRSpqn6n2:njz/110BDMihTnkEacUSps6n2","tlshash":"9025336aeccca331eeb071318b7019c56900c8ff9b5ebd51708e9538af119293bd9697","first_seen":"2026-06-05T05:29:40.976738Z","last_seen":"2026-09-07T01:59:59.976844Z","times_seen":22,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/favicon.ico","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.958Z","timestamp":1788746360958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a5121e6-2d5c\"\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=94weau8V48eUczPkVFOgUfKdk05vuOjZBTqZ4wJqrWz%2BGOZf%2B8xuS4AxgnJ6KMsk1L1OSoAp4fsUtCrTJJXR%2BDWyjaQlhRnqIeFvtkubIbNmyL2q3ihDn9cD5PVQg2lWqxK3\"}]}\r\nage: 32\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3721d13fb2d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11612,"size_decoded":12303,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"dbed04639f4abdb071f5ece5c246eafc","sha1":"722082796c120bdf2875e2da18b227b1bde870ca","sha256":"039ef51fd9ade076dbd4f42d43bdded6b4f18ae4946d1c7db1ab44f8f22031ca","sha512":"00c1eda41c2a20ed32ef5ee45b1485db5770540999e139b3531aeea7b70bbc83ea34839942f395296c3db7d3f9ea082d626e50958460e7149ecead075e8765ef","ssdeep":"192:Jc4Pv6WNxZTm60H8NcVxwttBQAN80rRJ8+x49+nMvk4EL46SR7x0Euq+F:qQvF1KtxEtBQANJrz8+E+ck4Evw3C","tlshash":"f932b0ed8d27b9cda1ce09111a4626009e23fb5e0f6db481fd0f425c0e577ea7188b1b","first_seen":"2026-09-07T01:59:30.446912Z","last_seen":"2026-09-07T01:59:59.977354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Geist:ital,wght@0,100..900;1,100..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.291Z","timestamp":1788746360291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Geist:ital,wght@0,100..900;1,100..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 07 Sep 2026 01:59:20 GMT\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8620,"size_decoded":1541,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"be003e12380217c157f8033cab563395","sha1":"7240a535a23d5db32b6013736f797ad8c19abd37","sha256":"8a81465e2e2f6c85e5eb7e30277e003d08138a9a95f71f0712a84c76b6b62406","sha512":"a2683e531ad5c04cebbda868b300c0d07e06205b2b60b74629d50b0f3f9faad0c212c5c2fd90c082e51e614c18d5cbe7b2a368328d8e12f351a311c2dcca5865","ssdeep":"192:dyfNyoSykyuryitfJWktFrywfydyGy63gy/yFVyR73xpmj3U8fHN:dkNhSpF5hftfcHjg8ciI9","tlshash":"ed02dc92046b9104ea431cc237cf7e32ae8e91556081d2be7ffd1dd9aceac22136875c","first_seen":"2026-06-05T05:29:41.036902Z","last_seen":"2026-09-07T01:59:59.977942Z","times_seen":20,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/main.css","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.292Z","timestamp":1788746360292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a5121e6-1441dc\"\r\nexpires: Tue, 08 Sep 2026 01:58:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hC%2FX7QGESv66%2Fg7UloXTBEIWVa%2BJVLi2Ls4PJDXdhMLv33IS6FyUdGqyoIxN5St0tdtXSis9%2B5C4ZUWmYuI4A%2FWyDj0YuPWo1Y1prWcvu8Wze2HWX11s1XI7MuoJViNeDRSo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d0fdb04712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1327580,"size_decoded":796542,"mime_type":"text/css","magic":"ASCII text, with very long lines (53184)","md5":"e9a7f60873095f6f1f3636c47bb0838a","sha1":"ec57a9d4a9f58907c0f882c9eb4f93719e52be98","sha256":"fb93efc0287885ebc504f96cbccfd0997ee719358dfd80ce0a352a5ebd303b22","sha512":"b3264e5718a749fa16cb977a30874314b6642ce191ad2bb731a7979b0a6f31c8d41680d7af3b5b7a5184ceeef51f6e6e1e96938efd9871db4f79e1ed49f8d604","ssdeep":"24576:y4FCHdAUK+aY+kuPaunmHV5mHAgwalOltT6FK:y4FC9AkaYcScODZ","tlshash":"6625f1f27227acaa47b91e00141d3f60dcac18eb915df948f7487cd6a16c620de7de68","first_seen":"2026-06-05T05:29:41.014075Z","last_seen":"2026-09-07T01:59:59.978637Z","times_seen":17,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/img/dark-2.mp4","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.603Z","timestamp":1788746360603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /img/dark-2.mp4 HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6a5121e6-44e96f\"\r\nage: 32\r\ncontent-range: bytes 0-4516206/4516207\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHbzb2UnXu39sdxSk5kt1o4TZqJbCFVfGiW%2BU%2BTLuzQuw%2BUEYYDoF3kpUvZuBlWHYmiOpePg%2FDsL97ZaRJH%2Fg6UOYGILmBPUqC5lCdBevgvvDKxF3VJXFmZmQbJ4GSMkRKr2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d11cb17712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4516207\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4516207,"size_decoded":4516931,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"fd8ae1eb8fe51e6cfcef70db70ffe6d6","sha1":"1b320b9d6a58ecbb4b6bc6be0cf3b5ee0e9a81f0","sha256":"b8db5d772864bc9e0d165b8ac2450fd40f6aebc5d050c1cf4645f10419ac95c6","sha512":"e15020471c5c37c6367d02cf37a5ff962d7c26f296fec79ae2bd8101eca056c69b8ac860eaa4d872deec31baaff6e9f546d2a72373d776c0be4fadc345b4508f","ssdeep":"24576:S1e+MoM9rxzXgtpHS6gG7PdcwiQaFaNme8+OJlXQzXF+B:S1A9VzXgtdS6gGzyiNmsclXQzXF+B","tlshash":"932533da01553593f00848f4a9a40e6f8acde531e8e80963b48cfbb9cb7335156ee7e5","first_seen":"2026-06-05T05:29:41.020339Z","last_seen":"2026-09-07T01:59:59.979174Z","times_seen":22,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/img/coinbase_loading.webm","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.607Z","timestamp":1788746360607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /img/coinbase_loading.webm HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: video/webm\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=4,i=?0\r\netag: \"6a5121e6-1cda2f\"\r\nage: 32\r\ncontent-range: bytes 0-1890862/1890863\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmnR3yTlNg9WJgCtAWejaXXJHBhGDptAY5UAI6FqJVdKMI0bPWP9XHpd7DrSj5wkedVvbUUlwcLaxi9pBdJTBZedWtGOk1x60TRUdNwiuH38CDZOVfgn6sOd4bk4l6JgIk71\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d11cb19712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1890863\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1890863,"size_decoded":1891578,"mime_type":"video/webm","magic":"WebM","md5":"634de0231ce3b09ebffb511c8ea2c9c2","sha1":"eba4389f88d69a70d5bb42db6fc713839545a8a5","sha256":"9797bfc8d6d59e7cb346587cc6a6751bdc5c21008bf15c97f08234ccfb351e8c","sha512":"8df56a948ed9cccc38a16af866626320d733355ce5de8875d1ae87282e21efa2dca56c6f7edba987893e580de5b09b2acf98e82d0350d8cbcda0e554de1e316e","ssdeep":"24576:yckNbMrt1Zu9wtJ8fB7rbU/8KASz2IY9xD:ycq8Z/Gf90/7V2IEd","tlshash":"a125231452062fc3cc718ab1eb341b6f169f099692a2302c87a65994c40d7f6df6bddf","first_seen":"2025-10-16T19:40:17.764387Z","last_seen":"2026-09-07T01:59:59.979712Z","times_seen":63,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/images/launchpad.png","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.610Z","timestamp":1788746360610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /images/launchpad.png HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=5,i\r\netag: \"6a5121e6-bfb4\"\r\nexpires: Tue, 08 Sep 2026 01:58:48 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jCQ5j8Lk9zkuLRWAZr%2BiaerYmzdSRSqKfFFzrZVZYOP2vb1xQE2uHJicmdCopX6d6B%2FmcgEnb%2FE%2FdLAivb%2BwcdAA1m%2FCk%2BC9oGGNb8QOzJYmrw%2BhgbA4cr6Z%2BXtKb5IVBIu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d11db1a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49076\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49076,"size_decoded":49823,"mime_type":"image/png","magic":"PNG image data, 275 x 150, 8-bit/color RGBA, non-interlaced","md5":"d1b1fd87cb51c98d8e74374783bfd436","sha1":"91932dc6f9d71a5b0ffd9db953305886a4d32571","sha256":"45b90e55a0234c3f31571451349e144c473d7e095393f759a37c53e48d4e8906","sha512":"f282f6dcfb6571815ae79f03f2a9c7abf45459a65649c617a5164bb9450cb6d319d4e93e03a8e9796c4e3a2ec5f62594761488b70a38f4d7698a36ae55e78f78","ssdeep":"768:hZrwJDvqOCggW2+3cpI4mDoFa8MuYU9hi0yxCmOgcKiPiaq345ytoyCn6WxzsY/G:h1OU80FZMsNEQPn5406Wxzl/w/","tlshash":"5a23f1d955430938ea24e6546375253e0c7feaaf5c44d1fa00342d8b4ae758cfaa8f8e","first_seen":"2026-09-07T01:59:30.458319Z","last_seen":"2026-09-07T01:59:59.980195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/images/airdrops.png","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.612Z","timestamp":1788746360612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /images/airdrops.png HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=5,i\r\netag: \"6a5121e6-f826\"\r\nexpires: Tue, 08 Sep 2026 01:58:48 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuomtUGO8dx1FHeGSnZXxRs%2BBZjgMqRNlvdKTSKdM%2Bs%2BLD3EQnRu9VTtyXI5PzxB0rY4yQkMGUY20fX0e1IJlYrVPvEA%2F5c9rrV%2FiwTzlPLJHxPG%2FjCudRxO9Ozu9%2BHiqM%2Bh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d11db1b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63526,"size_decoded":64271,"mime_type":"image/png","magic":"PNG image data, 275 x 149, 8-bit/color RGBA, non-interlaced","md5":"5f4bcd3e0d9bfbc7b06b2a9a694bc54e","sha1":"211f9186c72131756ca4bfb2973e77b4144def0e","sha256":"82d2879bdad0321b0c38ce5d1a9656dfa4d9fb54e0950fc1185a851cd373917c","sha512":"357e75fbe4fc5b05e17cf00ac5295614ab27b2d3583a80a27a528b19735a883625523a3e3205b8210142cfcf09766364220cb99082cd3a8faa05094eccdeb271","ssdeep":"1536:h1SErYRPZu2EVq18aghksTSGGlZPWiQtXoXP22CP2wWiMuma:hBYRoBVqLykYAlVWlX+PBCuw8Va","tlshash":"58530269b9a58d6c10dde8214e874de25e24b33c7f76bf940ab3308d24483f5c83a6d6","first_seen":"2026-09-07T01:59:30.450456Z","last_seen":"2026-09-07T01:59:59.980874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T01:59:19.814Z","timestamp":1788746359814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWsDfDTIhAaO0j6TR%2BUW3hBLllRqWwUNI6CsUddbBOQcPDfn3l5cAsqN48wXCrH83%2F2ZtmYydqfB%2FRypQF2PEoEFqeiuqF2Ltj8wP8LDs3DPauUejF9PKjlhjwxGkmYj0lgJ\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d0cfaf0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30228,"size_decoded":8784,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2548), with CRLF line terminators","md5":"219ca02b02381c9c55f94c543b1e3a75","sha1":"1ed6b211bc3f298763461173f008908e1c41d0d9","sha256":"d8719b70b2a0479789f68fb5063f35751feaa3981c43fb0bf1dce637f3d4f52d","sha512":"92f6e23412e74226e77028be06408de91f3ae2253bb38ed155dc66806be39f23561dc5e89ed527aec363f77896db01d8adf2a6bfb844c185f83ccdd6e78e7e8b","ssdeep":"384:L/ajhWF+53hhuaiYVbZdwRIS0SAkssKCu2B8Vba:LSjhWFahhuO7SAksOP8Vba","tlshash":"02d2847822c555b78173c3c09ab5526ef9d681a7eb16c114b3ec2b979fb6c8ecc63180","first_seen":"2026-09-07T01:59:30.448043Z","last_seen":"2026-09-07T01:59:59.981703Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/images/vaults.png","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.615Z","timestamp":1788746360615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /images/vaults.png HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=5,i\r\netag: \"6a5121e6-6a78\"\r\nexpires: Tue, 08 Sep 2026 01:58:48 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8geo%2FATme6K84E0xknzCVsnEVgGYqHlIfJ3sdIXcEPR1Cdu14zp99BZcO7I165m53Cr19XzSRzJMB7%2BQ2N1fT9eJBeroFxycYVUI%2BObuBIGxHL3Dx3l5fTF5LPNq7CVlIQjU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d11db1d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27256,"size_decoded":27991,"mime_type":"image/png","magic":"PNG image data, 217 x 117, 8-bit/color RGBA, non-interlaced","md5":"609e53f6fabc6b3874e2de59c596d81f","sha1":"28952c273147515d6c50a0fecd40408b422798ca","sha256":"04660717da1911dd800b0c47f821507d3c5a41437d84b8349e1e41984c47b66d","sha512":"a13b0d22a2a2d69ab32d35754e104bb8976019e9e6ed83b543bd1a117216c72c3ecbc6ffe07f33e21c4bf29e28faeb9e0e6388dc6e43d5956e5f01c8171dea2d","ssdeep":"384:2eqq1uG4NnKsmJZMcD7y3jnCHuMYPcBqC8D3Ish+Z1NLzh1dTuCErR2G9HfLUTBJ:JquGJgiiGcBl8D3Isg1NLfdCC2sGdfr8","tlshash":"7ac2f2a35a6d0cf322cb54f0652d8f85237b20a7c7c866757a47e95bc80a0c37d85bca","first_seen":"2026-09-07T01:59:30.445281Z","last_seen":"2026-09-07T01:59:59.984852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.daomoker.com/images/staking.png","fqdn":"app.daomoker.com","domain":"daomoker.com","tld":"com"},"ip":{"addr":"104.21.39.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://app.daomoker.com/","date":"2026-09-07T01:59:20.616Z","timestamp":1788746360616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daomoker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 15:31:22 GMT","end":"Thu, 08 Oct 2026 16:29:38 GMT"},"fingerprint":{"sha1":"4F:4D:B7:73:0A:2C:B7:A8:95:41:8E:6A:1C:7A:0D:9E:45:D8:E9:07","sha256":"A9:33:0F:6B:34:53:83:47:91:ED:95:DD:72:27:82:07:98:1A:4B:F3:DD:50:AA:6F:1A:8C:11:EB:3B:E7:4D:9F"}}},"request":{"raw":"GET /images/staking.png HTTP/1.1\r\nHost: app.daomoker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.daomoker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 01:59:20 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 16:46:30 GMT\r\npriority: u=5,i\r\netag: \"6a5121e6-ec59\"\r\nexpires: Tue, 08 Sep 2026 01:58:48 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aE7Ok8z%2FszQAGO%2BWsT1O3BXaW3soxhyoRn2%2F6ardPLXqg2x%2FuJnK4F4I5BWfVZedX7SPzjvuUL2Z36U7vkhkYljZRgc%2FWL8OLgkSXa4rZdhV0HQ3qd6VIAeSjpESlCi68UR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3721d11db1e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 60505\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60505,"size_decoded":61244,"mime_type":"image/png","magic":"PNG image data, 275 x 149, 8-bit/color RGBA, non-interlaced","md5":"eb946f69b257bfc9a72c6378cec268cf","sha1":"d46db84212b27191073e375eb74f2e6031159601","sha256":"8d26ce87cc46b9478d92e4111f19d2c0b7641335963dddd721322dc4b349df36","sha512":"300ebde09e94ebc522eab38b119db80dfe63ce4996a463759a9ce19a6f78ad92012027e17f7f94c36a8f89d578c68886098ad649e9a2d85e5bedbf1eab0a3ff9","ssdeep":"768:BsbA5kD5YULYWKQXiJSdy8doKLwCHWia6zu2j51pL6XZWubWmeFPZH18VtRF+ss2:BsbA5ZUL1XiWnnl7hN2Xy8vRF+ssWvme","tlshash":"0a4301f4a79918c0a8c4c0a730155827f93e20e18b8786b79f6dcad1f66d4bc1ef8187","first_seen":"2026-09-07T01:59:30.453721Z","last_seen":"2026-09-07T01:59:59.985561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"app.daomoker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}