{"report_id":"8dc37293-63cb-4f91-9510-ba5515518ff4","version":0,"status":"done","tags":[],"date":"2026-09-30T12:10:22Z","url":{"schema":"http","addr":"valrnsknc.top/","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":0,"asn":201738,"as":"Ufo Technologies Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"valrnsknc.top/","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"title":"SpikeDrop Intel | Tactical FPS Strategies \u0026 Esports Insights","dom":{"size":27338,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7d49d8d5360f16c6715a4e919955cde5","sha1":"5f9e531448c13642924b8983ec2fc02ec53a2be1","sha256":"6a8756e8dc06073abb75fc8ee60519e56fb019f88fc69b38aafb82c60dc1cce9","sha512":"9cc9cabbc696f2f427460f3a03e34af5046b920c6966270357eaffe9df09cff597bd033b815e01ef4854ef78f18b858ba384483b4c10dca6e88898fa05de87e6","ssdeep":"384:kkPqFYkrP3K5VCRxwZ+L/6pacRmzHUCApFYWV:kkyFYkDqCRxZ/UREGph","tlshash":"12c29525a6f310a7146391b47bd7974a7ba5d007c607cb183aad0b889fc7de6c89378c","dom_hash":"domhash4e8d6790e8bd8040ab2e8474e2de06b2","first_seen":"2026-09-30T12:10:28.169462Z","last_seen":"2026-09-30T12:11:30.968345Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"valrnsknc.top/","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":0,"asn":201738,"as":"Ufo Technologies Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-04T12:10:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"valrnsknc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"valrnsknc.top","ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-09-30T12:10:23.042781Z","last_seen":"2026-09-30T12:10:23.042781Z","alert_count":7,"request_count":7,"received_data":828827,"sent_data":3459,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":5,"received_data":101701,"sent_data":2811,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":6972,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"valrnsknc.top/img/3.jpg","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.499Z","timestamp":1790770193499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valrnsknc.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:46:50 GMT","end":"Sat, 28 Nov 2026 14:46:49 GMT"},"fingerprint":{"sha1":"2E:5C:3A:4E:46:E5:18:9F:30:CC:14:40:50:5B:5A:19:79:77:44:C2","sha256":"9E:05:67:4B:C3:8D:15:FB:9F:EB:FE:A8:9C:72:5E:D2:A3:0C:84:E3:D3:B0:CF:08:27:D0:7A:6E:EF:87:DA:47"}}},"request":{"raw":"GET /img/3.jpg HTTP/1.1\r\nHost: valrnsknc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valrnsknc.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 70075\r\ncache-control: public, max-age=600\r\nx-edge-action: whitepage\r\ndate: Wed, 30 Sep 2026 12:09:53 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70075,"size_decoded":70274,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x540, components 3","md5":"0c8e8c2e01ee4e497bf0e94231ced3a8","sha1":"abb58decc3a591e975d1f1314776d12853d72a13","sha256":"ca2a9d1e777ced3548af0fba6849571351c55d9d82ebf5ecd06096ec455d2276","sha512":"19ccd9ae6298a583aeb6470f74e471ef76cd4ae89bc74fbbe3ba1d8510fec965e9ba4d019f1ba29ff30f5011d29755cbb011d740aae1b8e9e0f76360dfc22442","ssdeep":"1536:KXlIQj0x/laQRSE0AAnRj29bDw5fKWkBmMTsT2Fs/xQ:Kd0m1E0AAnRjU2ZDasT2uC","tlshash":"eb63f1db7b72c708fbc48ab6c3e646fed4e76b55b0646ebc1619840c24684b2d5c620b","first_seen":"2026-09-30T12:10:28.171335Z","last_seen":"2026-09-30T12:11:30.97319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"valrnsknc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.668Z","timestamp":1790770193668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valrnsknc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:03:19 GMT\r\nexpires: Tue, 28 Sep 2027 16:03:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 158794\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-30T20:47:06.907041Z","times_seen":34158,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":36,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valrnsknc.top/favicon.ico","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.772Z","timestamp":1790770193772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valrnsknc.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:46:50 GMT","end":"Sat, 28 Nov 2026 14:46:49 GMT"},"fingerprint":{"sha1":"2E:5C:3A:4E:46:E5:18:9F:30:CC:14:40:50:5B:5A:19:79:77:44:C2","sha256":"9E:05:67:4B:C3:8D:15:FB:9F:EB:FE:A8:9C:72:5E:D2:A3:0C:84:E3:D3:B0:CF:08:27:D0:7A:6E:EF:87:DA:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: valrnsknc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valrnsknc.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 28010\r\ncache-control: public, max-age=600\r\nx-edge-action: whitepage\r\ndate: Wed, 30 Sep 2026 12:09:53 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":28010,"size_decoded":28223,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f1b71ecb31f6756919ae12ca3ade5eeb","sha1":"de3f99eb871b4824e365064ddb21273c247c93e0","sha256":"9644f6e8d5049836c5f89ee1829af38240c0e434562001a7c44154f7e1015fc5","sha512":"a0389b7f2d3cec584611041fc4ce0fa50cf183f59a01fab0f1117652afad27776d4df977838302c613d1c3b58a5da3a73c22d94603ac54b5fcfbbe7865d78740","ssdeep":"384:oN7CMLBheqK25Sn7Q6dMjSgmsAsXpZBGY3:oNWMjK2QQjugJASBH","tlshash":"15c26525a2c120a7143393b8ab92875dfb958107c30343587aed57971ff6da5c9a3f8c","first_seen":"2026-09-30T12:10:28.174914Z","last_seen":"2026-09-30T12:11:30.975974Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"valrnsknc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valrnsknc.top/css/bootstrap.min.css","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.488Z","timestamp":1790770193488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valrnsknc.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:46:50 GMT","end":"Sat, 28 Nov 2026 14:46:49 GMT"},"fingerprint":{"sha1":"2E:5C:3A:4E:46:E5:18:9F:30:CC:14:40:50:5B:5A:19:79:77:44:C2","sha256":"9E:05:67:4B:C3:8D:15:FB:9F:EB:FE:A8:9C:72:5E:D2:A3:0C:84:E3:D3:B0:CF:08:27:D0:7A:6E:EF:87:DA:47"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: valrnsknc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valrnsknc.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 232914\r\ncache-control: public, max-age=600\r\nx-edge-action: whitepage\r\ndate: Wed, 30 Sep 2026 12:09:53 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":232914,"size_decoded":233127,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-09-30T20:34:05.185111Z","times_seen":26053,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"valrnsknc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rajdhani:wght@500;700\u0026family=Space+Grotesk:wght@300;400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.490Z","timestamp":1790770193490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Rajdhani:wght@500;700\u0026family=Space+Grotesk:wght@300;400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valrnsknc.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 12:09:53 GMT\r\ndate: Wed, 30 Sep 2026 12:09:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6288,"size_decoded":1345,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0c077b77a9a3c565dba0a2c81c9e4416","sha1":"3dd30ac4f78ac4f4e6849a93d3c77241baba3ec4","sha256":"69c7f6ed7ecef695c140d690ccfd6f66fa398a649cc2392c61bb9b9d92e2724a","sha512":"38ba4317faf2a0d88c300bfd6921f685892113b5456592e6fbfc2dd17b9b30db752fa5264aa22d35f94951ddf15ca928f587b641ca99cb7b617b2e4a99696871","ssdeep":"96:8OXaGOXaMJc+uqOXar6N/OpaUOpaqJc+uqOpaANDNQO1aHQO1aGJc+uhQO1afNDS:Mi4v8eCB4cGGDZx/GiZfRG4W","tlshash":"2ad111910467a500eb936cc223cebe36fe4ea2556454da396ffe1898ec9fc325311b1d","first_seen":"2026-09-30T12:10:28.177163Z","last_seen":"2026-09-30T12:11:30.970328Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valrnsknc.top/img/2.webp","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.498Z","timestamp":1790770193498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valrnsknc.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:46:50 GMT","end":"Sat, 28 Nov 2026 14:46:49 GMT"},"fingerprint":{"sha1":"2E:5C:3A:4E:46:E5:18:9F:30:CC:14:40:50:5B:5A:19:79:77:44:C2","sha256":"9E:05:67:4B:C3:8D:15:FB:9F:EB:FE:A8:9C:72:5E:D2:A3:0C:84:E3:D3:B0:CF:08:27:D0:7A:6E:EF:87:DA:47"}}},"request":{"raw":"GET /img/2.webp HTTP/1.1\r\nHost: valrnsknc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valrnsknc.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 71600\r\ncache-control: public, max-age=600\r\nx-edge-action: whitepage\r\ndate: Wed, 30 Sep 2026 12:09:53 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71600,"size_decoded":71799,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9415ed8a864eaed749d367ab14d6cba1","sha1":"2caba8d6f56f702bac352eca25455124339855cc","sha256":"b6781b2608c116355c3a3ddaaefc322fa309dac074524d448f244da4ca19b7eb","sha512":"9ce4d1ff1c9171e1d1bd72742acdca8da77a2eaf45a5c4c762b745df128b38e5c040c5fbdf5fd69b1af998efc54aa2c550a964d42621c1c2a930de4a5de4e5d4","ssdeep":"1536:M9e+6eI+CsRSmyrutZeGqIIfcAg8clw0ilafmxDWOc0:M0ECscmGSYlIIf88cK0iTRWOj","tlshash":"4e6312e529787922fa01fab013f0e6f85cda4db4002f9f89aac8923144f557b347913b","first_seen":"2026-09-30T12:10:28.178928Z","last_seen":"2026-09-30T12:11:30.972169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"valrnsknc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valrnsknc.top/img/4.webp","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.503Z","timestamp":1790770193503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valrnsknc.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:46:50 GMT","end":"Sat, 28 Nov 2026 14:46:49 GMT"},"fingerprint":{"sha1":"2E:5C:3A:4E:46:E5:18:9F:30:CC:14:40:50:5B:5A:19:79:77:44:C2","sha256":"9E:05:67:4B:C3:8D:15:FB:9F:EB:FE:A8:9C:72:5E:D2:A3:0C:84:E3:D3:B0:CF:08:27:D0:7A:6E:EF:87:DA:47"}}},"request":{"raw":"GET /img/4.webp HTTP/1.1\r\nHost: valrnsknc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valrnsknc.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 123040\r\ncache-control: public, max-age=600\r\nx-edge-action: whitepage\r\ndate: Wed, 30 Sep 2026 12:09:53 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123040,"size_decoded":123240,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4f8ee2ee5ceed1062a2ee31ef0425ad","sha1":"a86a3b81b4257cbfa1fabcb3c26aaeb64cb49d0b","sha256":"f26f59c363b53323669f69cee29b7fea37a228e30b72f4483e0b235006a8d5bc","sha512":"3355afff924ed42e0114ad3b26ad28c01d74ae6c8ec41105b82aebfeb66f30dab023590de1f9a3f5169e674bb854dfb482583bcc216cc8d231686044d692e730","ssdeep":"1536:G+lkUAu7P5LZagBRQjv4L2aWItbU8/Cuv4LKwIoKMMdJLhNKLM/dfKqbUolEdTcB:GdLu7x9agBRQr4Ca88pv4kFdR/dUwui","tlshash":"41c312464b2f6e72e5977d3f26400096f90e1a983da34efc26920d6b1f24911dfc1d9e","first_seen":"2026-09-30T12:10:28.180408Z","last_seen":"2026-09-30T12:11:30.974189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"valrnsknc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.665Z","timestamp":1790770193665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valrnsknc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:03:19 GMT\r\nexpires: Tue, 28 Sep 2027 16:03:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 158794\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-30T20:47:06.907041Z","times_seen":34158,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":30,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.666Z","timestamp":1790770193666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valrnsknc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:05:36 GMT\r\nexpires: Tue, 28 Sep 2027 16:05:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 158657\r\nlast-modified: Tue, 16 Sep 2025 03:40:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15688,"size_decoded":16501,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 1.0","md5":"d5448938a162ccb434b09f4572c0191f","sha1":"be9eae3d1d9f4fbd2208e0fd3c871b17b65b6516","sha256":"5b7e4a6f97163c2636724d4de90304fc895653dcfe64c67a7a22f26331ca5c5f","sha512":"df0245084768642738387f7a0daa11c4bd0109617c4120bfd88083c30d686ee2bd327e426ce0d9ee1f50839c5e2890f8a2a2d7acce3705fe8fa324fe623ad942","ssdeep":"384:Bktl5HsgImpL/2gZDAMAyNWE3pZrsjyb2mf+X:Bkl5MgDpT2g5AMtswpZZ2mf+X","tlshash":"7962c046a5a6b998f4d4ecfb0086542c19bb5ca11c6230f3c719356f5bd3e75cee4540","first_seen":"2023-04-14T01:29:53Z","last_seen":"2026-09-30T14:18:56.278878Z","times_seen":6712,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.672Z","timestamp":1790770193672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valrnsknc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:03:19 GMT\r\nexpires: Tue, 28 Sep 2027 16:03:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 158794\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-30T20:47:06.907041Z","times_seen":34158,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":44,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pb0EPOreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.674Z","timestamp":1790770193674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pb0EPOreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valrnsknc.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15084\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:11:50 GMT\r\nexpires: Tue, 28 Sep 2027 16:11:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 158283\r\nlast-modified: Tue, 16 Sep 2025 03:40:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15084,"size_decoded":15897,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15084, version 1.0","md5":"98d75ef6878aa0544049b77bed867541","sha1":"e7d0d08b1ced5e6c424aa7efb0ea5c11276e4cf5","sha256":"23afdb9b5b89b878fab04d80cc30bf41bb4f3f7e8be88e5f16a7cc7671cdb2dc","sha512":"360ace65f75039a94a33a835761442eeb1d67d612598766375ea0715d577f09cb09e1ffaee5d3553d3832c7ce1d0915e7b79c0b4eb1c00129cc2a4f4117a2c43","ssdeep":"384:gyo8YAic7O+qBHVNtW4lIS9PqRDGr3DwKmQ7s9:l9JiiO+M1NtW4lDwBGUW7k","tlshash":"ec62d09c5a2e96b0a90e7d34847b6102b0f11fa7f5541fc9c10205399a0fe780edd4ea","first_seen":"2023-05-01T20:08:41Z","last_seen":"2026-09-30T12:11:30.969629Z","times_seen":4029,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valrnsknc.top/","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-30T12:09:52.726Z","timestamp":1790770192726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valrnsknc.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:46:50 GMT","end":"Sat, 28 Nov 2026 14:46:49 GMT"},"fingerprint":{"sha1":"2E:5C:3A:4E:46:E5:18:9F:30:CC:14:40:50:5B:5A:19:79:77:44:C2","sha256":"9E:05:67:4B:C3:8D:15:FB:9F:EB:FE:A8:9C:72:5E:D2:A3:0C:84:E3:D3:B0:CF:08:27:D0:7A:6E:EF:87:DA:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: valrnsknc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 28010\r\ncache-control: public, max-age=600\r\nx-edge-action: whitepage\r\ndate: Wed, 30 Sep 2026 12:09:53 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":28010,"size_decoded":28223,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f1b71ecb31f6756919ae12ca3ade5eeb","sha1":"de3f99eb871b4824e365064ddb21273c247c93e0","sha256":"9644f6e8d5049836c5f89ee1829af38240c0e434562001a7c44154f7e1015fc5","sha512":"a0389b7f2d3cec584611041fc4ce0fa50cf183f59a01fab0f1117652afad27776d4df977838302c613d1c3b58a5da3a73c22d94603ac54b5fcfbbe7865d78740","ssdeep":"384:oN7CMLBheqK25Sn7Q6dMjSgmsAsXpZBGY3:oNWMjK2QQjugJASBH","tlshash":"15c26525a2c120a7143393b8ab92875dfb958107c30343587aed57971ff6da5c9a3f8c","first_seen":"2026-09-30T12:10:28.174914Z","last_seen":"2026-09-30T12:11:30.975974Z","times_seen":2,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":258,"connect":31,"send":0,"wait":31,"receive":35,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"valrnsknc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valrnsknc.top/img/1.jpg","fqdn":"valrnsknc.top","domain":"valrnsknc.top","tld":"top"},"ip":{"addr":"109.238.86.76","port":443,"asn":47323,"as":"LLC PioneerNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valrnsknc.top/","date":"2026-09-30T12:09:53.497Z","timestamp":1790770193497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valrnsknc.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 14:46:50 GMT","end":"Sat, 28 Nov 2026 14:46:49 GMT"},"fingerprint":{"sha1":"2E:5C:3A:4E:46:E5:18:9F:30:CC:14:40:50:5B:5A:19:79:77:44:C2","sha256":"9E:05:67:4B:C3:8D:15:FB:9F:EB:FE:A8:9C:72:5E:D2:A3:0C:84:E3:D3:B0:CF:08:27:D0:7A:6E:EF:87:DA:47"}}},"request":{"raw":"GET /img/1.jpg HTTP/1.1\r\nHost: valrnsknc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valrnsknc.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 273741\r\ncache-control: public, max-age=600\r\nx-edge-action: whitepage\r\ndate: Wed, 30 Sep 2026 12:09:53 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":273741,"size_decoded":273941,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1920x1080, components 3","md5":"d6a32bcdb585eebee14b5874fdbc3c9c","sha1":"8618ff62d1f8a3f414d79e9024c6245f5912cbce","sha256":"51f5f55420fbad351d6a4d44638d48fe6997857df319f50df9fe71110038522f","sha512":"485812515a4a66370bdc7c5aea70a4786df0e796554042fceb1d11500ee1e1a72fccb61d68c3022217f317d306c6be4aec22e751640563087fa2ada19606b0b2","ssdeep":"6144:0+4wmPtWIjKLk/5ZnC9Bg5Tu69KD+gWAiXJqDSoD7RPY:0xJL5Zn0ZiXJqDpBY","tlshash":"ff4423a09544d11dda7ce288f062ecc86e5fea2ce6364c1e6fcc95b8e1263d781dd583","first_seen":"2026-09-30T12:10:28.182739Z","last_seen":"2026-09-30T12:11:30.971317Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"valrnsknc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}