{"report_id":"8ed9465a-426c-4539-a8c1-c7d0c14cbd1c","version":0,"status":"done","tags":[],"date":"2026-09-14T19:20:37Z","url":{"schema":"http","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"title":"AbeBooks | Shop for Books, Art \u0026 Collectibles","dom":{"size":353373,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7063)","md5":"863d960ce39a6e4eadfd417d6f42a263","sha1":"fea2c06b6e0de7bd4742c167157f0ef77393b4c9","sha256":"b05e6c269be1ed5b55bdc7b910f8b9013581b14512f41827ce2c82cb9a647554","sha512":"a98877acb02ae931ffc9c5b318df2a715f0771f67f6a2c9b88ada164ff7151a626bc0c75bc0ed72870310d267819fa4f1c6d78eeb4ae8d05ebfd3ea87e074c5d","ssdeep":"3072:lYoVHj1I6KZG36DvhFaxtHUwSkR19RSEifmmI+EthwCXiLnIh5SyMV13phe9Wurj:CoVHj3wCJRt","tlshash":"c17428e6f8e0042ba25300bbeed6739d6b75ea0be70bc1d475ad83109f51dd66066b0c","dom_hash":"domhash75195db9aa8bb35c7655c167de6c5f39","first_seen":"2026-09-14T19:20:40.837258Z","last_seen":"2026-09-14T19:20:40.837258Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T19:20:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nbenji.com","ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-09-14T19:05:33.463187Z","last_seen":"2026-09-14T19:05:33.463187Z","alert_count":165,"request_count":33,"received_data":1998401,"sent_data":17471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:b164d16592","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"assets.prod.abebookscdn.com","ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-03-04","domain_rank":610842,"first_seen":"2021-10-14T06:23:38Z","last_seen":"2026-09-11T09:48:56.991948Z","alert_count":0,"request_count":6,"received_data":61097,"sent_data":3157,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.abebooks.com","ip":{"addr":"65.9.46.14","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1995-12-24","domain_rank":70311,"first_seen":"2012-09-05T19:12:50Z","last_seen":"2026-09-14T18:39:46.176148Z","alert_count":0,"request_count":1,"received_data":1524,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"unagi.amazon.com","ip":{"addr":"44.215.115.167","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1994-11-01","domain_rank":7064,"first_seen":"2020-03-21T21:26:34Z","last_seen":"2026-09-07T21:11:03.07Z","alert_count":0,"request_count":1,"received_data":368,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47ec171fdba9b8286941597fd9bf638c","sha1":"422236f2b35412b1a9d904debc6c66573a03e416","sha256":"306f364577ef3501d835c17088dcae60a69243a554bdd5efa4a92b91e5f08911","sha512":"29345ae8ced32ce3d02eb3d9ea264225e134c4798600480b4aa377808c84458f992d18c7969ae448b0bed08e140589b89112e138b23d57bbacfd5d8fd95f0991","ssdeep":"","tlshash":"f7e086f887e18007c9b349b6f7137b21a1d35c3aad93a07d5e814100b772117e4c4cd8","size":329,"data":"","first_seen":"2026-06-09T11:59:11.588699Z","last_seen":"2026-09-14T19:20:40.885721Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99b4f158a4b8d5ed391f66aaf1d8cc97","sha1":"57f31735e77b6753a8612e9aa9856e8e505104c6","sha256":"6825a2e7e3c7f4fbeaef05382f27f87571fdecd24a8747ab9fee4d8a22076281","sha512":"8bccaa2c7bc64e9ddc0fe5320c747bb85e47ba0165e30e17fcf9eab2746bf375df0fe63ea6fa16a613d907160ee8cc8d555666a258b33a41220a40469b08c60c","ssdeep":"","tlshash":"25e0c62d883a0146ce1f2c2df8eb8002ddb00c3c21098495c09ecc2cd5b0deaaa7ec88","size":358,"data":"","first_seen":"2026-06-09T11:59:11.589825Z","last_seen":"2026-09-14T19:20:40.886434Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"380bd5d1e6e528aaf51d0d7a1848be9b","sha1":"98fa47e4a22f8c0cb3c0b6937f64e76ae382c800","sha256":"32e7c53b5301fc3e33ea50b6caa6eee20de0f1831dba2a39505830f4addaa8fa","sha512":"a59f1fd8b85eaef181d57e3d24718a1fb5cc88b19b864a9bb309e48074b4261a2d68f12fefc9732ba918d7021e2ae6c00ec0d0b8bb307c542c6f23c328c424af","ssdeep":"","tlshash":"5ef05ce7a43590aa8eaa911da9337e960a3c709ef680a7f684946e0817c82801162239","size":459,"data":"","first_seen":"2026-06-09T11:59:11.59108Z","last_seen":"2026-09-14T19:20:40.887284Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73b8d17af736925977f3b34fd2699e0","sha1":"0a0f11d06e1531b9456e81c3c5eab8a32f5d5eee","sha256":"aff01a1649bc7f06130366dcf7844bcc787d904a4692c4466819d86b3fbb3f68","sha512":"8cfcd81407e4e52c4a46dd6ff204f55389ce616e1363274c112609281cb0c51853dcfdb755dd277aaca9ea38b7914108020114e9cc747b3f70f9a5e6dcf9b79f","ssdeep":"","tlshash":"ecb01248c15416201fb42c3ee0864d9045d02d1b7d5ec05d1068400072b5cc325c892e","size":103,"data":"","first_seen":"2026-05-17T18:03:30.364881Z","last_seen":"2026-09-14T19:20:40.88805Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c303321a417e73449a31ba4abcac01b9","sha1":"35a674bc1e453ac4e78c98516213761669ad8644","sha256":"bd3de279305a4b267678663de5ce47288a0197ab6527c0e0fb55fa8d5bafe53e","sha512":"e97b9a096f8ffafc04e70aea4a2ca242c2dd2f3f2252cc3408a5760bc5383bfb2635d4a08e0deccb8120a05da20f953e0198eb3e2573bb3238366712c8bec173","ssdeep":"","tlshash":"17e0abe664a281371d0632acf9067f6e1ef0a104608342e880e5cfa9710e15a12b8938","size":417,"data":"","first_seen":"2026-06-09T11:59:11.593335Z","last_seen":"2026-09-14T19:20:40.888741Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe5a4119252735550f0f165ec5866853","sha1":"82b5fd8c15e5bf12d43b568bd289b2b3d6b0facf","sha256":"62ad415a8feddd24ed101bc1bed5a2dc5a8a5aa0136cddfa5a76bbabe4f6023a","sha512":"377a38afd80198ee883944269996d7f724e878688d3c7586859ce72fa8fed94f9794a1fbed14ab981e245fe967289c1ebbb2efbfa0021028b27fef169d2a6394","ssdeep":"","tlshash":"6e01b89f5deae3b09a4310a7af36e906b71221a70040d109b80dc51a6f60fd6881cdc4","size":816,"data":"","first_seen":"2026-06-09T11:59:11.594431Z","last_seen":"2026-09-14T19:20:40.889466Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66cf396ee649b8a6704dd272d9e95365","sha1":"8846359bae5a43deb57d63fec3d79a75e29b3ef2","sha256":"144d28b0a713d5e0f3563f0d2a1372ca5df80d0636a6b58822e52923514a0e1b","sha512":"2d1df661f299cc65aa87ca967bd15f1d11ab26c96b5e8320351ebc2f1bc13bbc2c89b14268d18b20a45005c9b514b007d600086acb86a2d3315f9d4fcd713802","ssdeep":"","tlshash":"46b012cf05911170d1b602538f03b3e40286415869a5c1bcd020500024f13470041c84","size":87,"data":"","first_seen":"2026-06-09T11:59:11.595894Z","last_seen":"2026-09-14T19:20:40.890248Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8d7895bee8edcca83ea394328169068","sha1":"42955b8c0d67f6a8af6a8df3ab734172e5f1df80","sha256":"9daa4f9e0f1fc84528fdf4f0d7cfbddf6520b9f5e0b4713117a4112e1b3f1f23","sha512":"0f6c721041e41b5dcabad844c8349c0d368f3af1825a59e2974111ac8c20395672a248babf16206c1a10296851d2977eb5d9fa2fc6bfe07673b67ac2be118fde","ssdeep":"","tlshash":"83d0231d40671471247730d56f9b22157336005308c199867e4d53641f1096ec2576cc","size":260,"data":"","first_seen":"2026-06-09T11:59:11.597754Z","last_seen":"2026-09-14T19:20:40.891321Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ab8eb9f564ca326e038ced9c20d62b","sha1":"3dc7d1451d6cd84e42406235299552f75068d11b","sha256":"0e897628b61b58fc28c66c96ce17b63b640524389094d25e357e37ba77d17c44","sha512":"d006295a5975c9deaa51c82128533b7f071263a7e56c82cf2312ee4e99dee4a3c8398240f50d6af156d07dd0a3e103d79f054a14bed0b5e4db612d97e98c2282","ssdeep":"","tlshash":"4df02e866c43b86f16d1f76bde596f4738e14539204ce0741245f03c7458b9b9c547dd","size":509,"data":"","first_seen":"2026-06-09T11:59:11.598916Z","last_seen":"2026-09-14T19:20:40.892278Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"645de7f99ddfeed3a34b9f57ec43571b","sha1":"731e3a90266a941b61ae2348fab494801958d219","sha256":"a3efc2f724754098b7c93c6b8ad8d5d3e88686c0baa48f5304d4f6e63f4d67ab","sha512":"1153965ea79adf2fe1bdb95372494d20039cc3605f7559e59bd0655e9cc9957ddfc41725cd2da2337e74cdb33c7a96a4432f7d078a360774a49aaee6bf827566","ssdeep":"","tlshash":"87d05e2fe812f07b50cee4968eaca9882e3502743088c844ac1cb8524a9c55f2995adc","size":260,"data":"","first_seen":"2026-06-09T11:59:11.600112Z","last_seen":"2026-09-14T19:20:40.893117Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5019bc2df342a6f0670497b42f20e91c","sha1":"fecd7fe01d55ac8d6f472ccbc74d81a2104b9c05","sha256":"71fc1008abdcadd8d58250addd8679de8b3ee03360cd6ba7895690f538902d23","sha512":"0098d6f495064e56986aff1954960c4695604e5f72b01ea9c5187242bf223a530c4883294f46eaf468d3cd4d2b6021e2be0c39703436485a16f8fca54275fa2f","ssdeep":"","tlshash":"d4d0223f0802f02b10cc39db9e9c0d0a3b3d123830ca08602808f290acad41f2826fec","size":213,"data":"","first_seen":"2026-06-09T11:59:11.601196Z","last_seen":"2026-09-14T19:20:40.894068Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9381e8d06e091007ca21e43c9d3e90d","sha1":"ea94c4118f589e920ca935019bfc464e27ddfb31","sha256":"ff14cd343836d78b98f659cc1622db0e8bc500defd6870644142f406dd2a623a","sha512":"4be53d8a33aab52aad92b433ec0d29938ecfb218b5171e8962454df239677a736b466205671b8bf323aafdcf45854e1016266ab3e4083c3899bc7799caded9e2","ssdeep":"","tlshash":"2d11c07fa80814329ab73121f5cfa3686c7741ca65014881089594b078bec6e573befe","size":883,"data":"","first_seen":"2026-06-09T11:59:11.60213Z","last_seen":"2026-09-14T19:20:40.894961Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"332f11fa4132a24c479f8d10b2018073","sha1":"33ae7d6828016d2c58bfbc91472f2242184f80b4","sha256":"dc19735b64710270d87d7ec9b2a8b68134896e6b7abc2480c936b4b06a6a9ad6","sha512":"ef71236239a0800e9f0b435e8bb8836aeb113edfa97d251cfe48ecb20d6f105d06d7341aea5ff1dfd73cc6e9b923bda94f1fbf63f441b9b9bedf38fb049f8029","ssdeep":"","tlshash":"6ac080fe34a66517d02a0273ce4fa24d5fb47a5fd7d2f1b5613081045e7475310d5c54","size":180,"data":"","first_seen":"2025-08-31T04:44:53.950334Z","last_seen":"2026-09-14T19:20:40.895789Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dbdbaa17c0320923abcdfd6811086fa","sha1":"af7b9aab57804e37206f5e13ce8a4f9799af98f8","sha256":"ac357ca0c5f8933f5fb94f21bcbc6a7078c61c8cf8f39429e93e1aef8a6fb325","sha512":"aa604ffba2672bf31b94457918b9b67b6d7836f626cf63f5d308e9de06f913fbef6a9b47a7c8cddf47e43fb3dadbd4ab3a7ae92096105ae7821e0af48ee6c1e6","ssdeep":"","tlshash":"a051595e85b60db101b3b02aef8f6719303100ab34468b143e6c5f957fa911e87a5bdd","size":2670,"data":"","first_seen":"2026-06-09T11:59:11.603613Z","last_seen":"2026-09-14T19:20:40.896597Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/productwidget_merch-8ae3fc5eaa.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ae3fc5eaaf82e4d2a300c4880286f34","sha1":"210bbb0882f4dddb1e0889782ab7a03604cb49f8","sha256":"aca27bc2826407419bafb8b46bc1656002132f5130864affc462602f16e35641","sha512":"1f6f894f907e657b6cc04af45e56f23a2d45414f7483ad5ad5009bb23e60a016d446ac87e4d82f811e94c2fd1594022d2da8e4f302cbd22cc519b39708637a38","ssdeep":"","tlshash":"3c81c9e63658b0711b5775e0c42b348af07106345c9d4a20baa7c0bbf82279f9577b65","size":4064,"data":"","first_seen":"2026-05-10T14:16:13.152471Z","last_seen":"2026-09-14T19:20:40.875572Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/All.min.7e6ab57976631cf2500d4b94dc6618e4.gz.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4eb2ddb43d32012f665d3eedfa6da1d","sha1":"8af1fb62ac3b20b04b9fd06eddf3919bbefa8fce","sha256":"b863869b47b5fae7517fc5da9ce95b8c4bfe2be51a458f6176359970c81dca45","sha512":"3e14d400ef1d3c400b0b1740dc26ee3fdb3d552eccba3a460e9e55b0786678d2f594cc55571aec1b4bb5756c2d40d226ffd2ec83aa9a999e8677510d04788e03","ssdeep":"3072:KKF7lW2wrkpDgjot8nWLKnTgVoUmcN1o5vNKCB+OEPsRO:KKnW2wrkpcje8nWKTg7Av4CBc","tlshash":"d5443a973346b63242dfa1ebb0664245b236569d6401812cf83cecdf5c68d4a32bbfb5","size":255283,"data":"","first_seen":"2026-03-04T17:00:45.409259Z","last_seen":"2026-09-14T19:20:40.881105Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/PixelRenderer-7a12163030.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a12163030ce987109ab0ebf327ffffe","sha1":"2bc2de6ff7bf940d277e5e8734b6e2feae5a74a3","sha256":"c19fdad23036544d558941f0a3323975ba97730ddfdacd042a7b9bb0ab780e44","sha512":"94102269edb2ea83f9170bc4aa8f1ad8b9f52b65a8af16cfb53572c5b335cc297b473140f9dea90f267a9950bddd29607beda34aeb64fee017526247b8b2d6f4","ssdeep":"192:+WpTHi5Y2TfqjgwSVSwGzxCar1tQJMg6lY5F2aCq+HZIP:dpwTX5aRqF/P+WP","tlshash":"d4e1b92a30d2a51f49c270612d7f375aa17b12b8344e501c79168ed3bd38d4e12afbf4","size":6999,"data":"","first_seen":"2025-05-30T17:32:39.537281Z","last_seen":"2026-09-14T19:20:40.862824Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/csa-d403f7adf4.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d403f7adf45f72a4c120a930c3db5212","sha1":"9b3b66db2e0dcdd9b54aefc2c5f7ff4b972cadec","sha256":"5da646816f30346e2a7c0fa94b644891ce2584254e2fa9803704764a39109fd3","sha512":"43ed74488b6e34f71eba9a3850f8138b667cb6df56cc105933267c3ae978021277219019be90d994c86d3a3365b90abbbd816e357bec2cfb9bee7af5bc56c028","ssdeep":"384:MaoqEt6VPBhJNXKiX5qzBwrycSQ0lt7Xbs9CxPiK2Q7V9LNIzZpB9s1576YmJdxI:MDLONx+k0rrxPl2Bi1t6RY","tlshash":"63e22ad9b5d678331267313aa0af610bb33a23a7344d88519415b9e42dbd7ed8323f5c","size":31766,"data":"","first_seen":"2026-04-19T02:47:52.719676Z","last_seen":"2026-09-14T19:20:40.881772Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/productwidget_core-78b1a058d2.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78b1a058d23b26528a17168f7cbde761","sha1":"c57dbafd4377eff8fd02e68bf73f683247eb9128","sha256":"25583f5b80440ec75971919bbf4f4c18b7dede21840ea9a33e0e356766ea5671","sha512":"834178bbf5cbc7bc22c0d864066a9562556ac209636550da034920c96db5c8df26ace997727e8d768ec82e8f9b4323899550e5d3e1a1d583dc83ac2eae760bff","ssdeep":"768:AJK+E3ftapjvCSuVqFDb40LTBbQulByxreBZbVCpc3t/9hdaO7ui3ORS:AA+IQjvC4N8uryAZbVCpc99hdz","tlshash":"ad43ea84f6b6367de11b4ca8d02fe649743a3604da8e0875b8aaf46255161ec7333fdc","size":59746,"data":"","first_seen":"2026-05-17T18:03:30.339072Z","last_seen":"2026-09-14T19:20:40.879198Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/react18.bundle-8d00f21452.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d00f214526b2f83cd11b5cb4dbeae1c","sha1":"2d991e0e79862e2cf2938358aaad0677373903b0","sha256":"f5d719aa39dd57fb86f559cf2e209603eb61a64ea88dc641436c90e5f8252336","sha512":"40f6efcb1e7bae687e75e5e35fa7292c78ef10bac9af98e46cb4536aa3330c72fea815b39089b14686f9a4de6cb61d529217704ef84c3458fc434576a857223f","ssdeep":"1536:Uhf51/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:KU55qZpAZxA61iz6Phkm","tlshash":"a2d339e87992f6425ab212ab10ef1047737c9a27784c4cb1e540fedd64b806da17bf8d","size":142587,"data":"","first_seen":"2026-03-04T17:00:45.485449Z","last_seen":"2026-09-14T19:20:40.861187Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/global/AbeCookie-8954a5518b.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8954a5518bad8520734539f1393f0acb","sha1":"a181f6c623b3cd0965acdc39deb634da28acd79e","sha256":"e6c3c3304252464645e7d6a5870225cd294e5d72ba05a6a3834c3a9ca232f315","sha512":"9fca92e83911100a0a7cddb84cb8b2efa7a595a3af6d5631c1344649f306a7dd7ce99d3041839af590047f436acd4123851a2fbe9f7d1984639b6b37e6239043","ssdeep":"","tlshash":"b311e2d87da0747cc1050191acac9bf979384d5e58d059049a20b8b079b4c1b9fe7cff","size":1085,"data":"","first_seen":"2024-10-26T08:53:13.549431Z","last_seen":"2026-09-14T19:20:40.870789Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/productwidget_recommendations_home-78267ef0b8.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78267ef0b89855bb2721fa5c51a18775","sha1":"b304965996799dd9bc11f736f075ea5e71020140","sha256":"080b2a57b646ed1b2d2f9ab4df5a6eca898d0b58ab51f86e5e91959e4817f0f1","sha512":"4373a9f09d89f47937e55cf34333838312f70f957890e879c86a0ac9815952360fb2201a1666f72b40b7b6903124ecee68ebb896355548ffbe3c9b256fabd72f","ssdeep":"","tlshash":"bc4165d831c0a48c0253f0a4047fa196936b68915a6ef895c653d0f7bcb83cd8163f5a","size":1944,"data":"","first_seen":"2026-05-10T14:16:13.176621Z","last_seen":"2026-09-14T19:20:40.885061Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/global-utils-e3e4047e25.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e4047e25afa3c7825558c04e3ca2b5","sha1":"143849b1b5447a462baf1862aa74c8dc83d4aeaa","sha256":"0b73e4f32ddf3620fa1c74debe67f7807870d2412e542daf646290c8e02ac805","sha512":"2fdd12caf8014d23a3c7f8de2a4872a13eeeedfd4e3e12d1f6cd1f74765d5eb72735457fef55c4a6007d199839996f132ffb4837cc79326b813e8f9ab71cdbf3","ssdeep":"384:HiJvpPyJU94xpLu493xeiZ23xx9Ay2HM/q3y9ezpJ53u/jWDvQaX:uhfUlI/9VOLy9eajWDvQq","tlshash":"92a229cd7481f02a476720b1802f6b0e71f5551a7889c4a0f260e8f6acb591f9b7be7d","size":22388,"data":"","first_seen":"2026-05-10T11:59:58.021609Z","last_seen":"2026-09-14T19:20:40.876944Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/sitenavtoggle-e7be457d87.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7be457d87e080b399097e44b8936e8b","sha1":"daaea1eef487b7a052df752a06b1ab5c95fb28ad","sha256":"98e0b7c1127f88b442022832d82128cf4de1dc369833f8b371c2da1ef3bf5578","sha512":"61d0c5a60b62b1992e8fab2182849c42dac8ad39e7d2abb464236e276e2ad545b63fc779a7d00c8a9acd87ae9030460ac3abbdf9b30b27a6e2e9a9541d4816bf","ssdeep":"","tlshash":"3611dfbbb61b2c3342d8e4faaa45a6c0a6a08148cad100753d7ea85e00c7ed145f66f6","size":1091,"data":"","first_seen":"2026-04-19T02:47:52.782745Z","last_seen":"2026-09-14T19:20:40.882454Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/eventbus-e0d54b1290.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0d54b12906320feded4cd310ab06890","sha1":"2a64c6addac3c6b10e968b9d6ab129954dccb216","sha256":"eebdb074ff3f5b4854b7f146cbd18d94853a2a95f467d8d50fb4e3a10fcfef25","sha512":"ef15af58a5b3b0dc63be35c467b970937f93e5bb965691fe084775df23f6c23666773e4086b5c786fbfe536231b2188a52a69f88ef9e5d230e5d53f30859f2e5","ssdeep":"","tlshash":"d311a39c19f0927501da967f7a4d3e5f2192cf9e2015200c729cdecab788d4fe5976b0","size":881,"data":"","first_seen":"2026-04-19T02:47:52.70353Z","last_seen":"2026-09-14T19:20:40.875011Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/bootstrap.native-b164d16592.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b164d1659295b01e378040e8db9b58cc","sha1":"5af99a75d6178b600399c642c2204efef8a46f26","sha256":"2983f595bf116c7580299d8bc3e8e5df660c300b249910cd2e2d466b9b5d2a68","sha512":"c60554a6c6797ba9b95aa0a9f35e5bbe3423190d822f63b9dde992e779dd831bc89e7acf6963958fd3a123db7e372aaeaa832e6cf84d011a0f640bfb4bd14626","ssdeep":"96:huvx7Sh+yHN8s8sHYXG+oQ8DPQS5grQBwDJyg2Qsk6vlp045cKlFzpM8xn:Gx7SEytWs3+oLDPIr4wDaxkklp04BlFJ","tlshash":"d1c164b823243d7405df48fb71feab883a7564b0d8071968a53ddc5a1979d860223fe8","size":5609,"data":"","first_seen":"2026-04-19T02:47:52.760678Z","last_seen":"2026-09-14T19:20:40.851823Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/global/cookie-consent-util-40a661b2df.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40a661b2df71bbd63a063997c7f87b12","sha1":"47fe5ada624b168bdce13e6036a6efd120100278","sha256":"755801314e8ba786f740db1a3514a535293d64fe993554d4c2d3b48b9f4465e0","sha512":"badb7ef8a6723f4e929491a2f7dff122c87b271ceb3eafdaecf97e817a75c535bafb675032dffe1f5e58daf7a661b2ccf8b1d043b45de4340253f1022cc8160c","ssdeep":"","tlshash":"0a112180b3c2690882211d3a50a9716f738883372b1cc8096a5240e360a421765fb93e","size":970,"data":"","first_seen":"2026-04-19T02:47:52.714201Z","last_seen":"2026-09-14T19:20:40.846732Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/searchautosuggest-ec885890ce.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec885890cea39249a67abc7d22adf41a","sha1":"25dea1b94bee9b6eb865065619664e6c35e1165c","sha256":"7b8b14399d2e8c57153d6e8db8f35761a838556505e702b9aeed5366e2199819","sha512":"708c5c6680b31d9c443fb0fd95e0b2ba454baa7e99995ec445790eec49617cfaba55448b642f0929bf0577e600ee3e2e20aca57e1ec50dbc66ac8a78cf2c927b","ssdeep":"384:lDdMZbWPKf4lkCWsjPZkRuHLkzB8UyRcN2ob9sQC3qkWpGiVSz65:lRN2RuQN8UyGNUDqkf8sU","tlshash":"16923ab6334124359afb0388385f618d71b58956e80c5884f3b7f9a56c64f5d90aff38","size":21212,"data":"","first_seen":"2026-04-19T02:47:52.752717Z","last_seen":"2026-09-14T19:20:40.844433Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/global-base.v2-629127c516.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"629127c5161d253d081ece39bc1b4b76","sha1":"e606054d81ff27aa6cc1edb05c8949b99eb8ea19","sha256":"e87e9ed402e0c24f03fa4ad338ebea207b075c2e7da4a77bd9b55b9f7dc66b41","sha512":"8bc641abaef1d55691c424756ab05534cc44f5703b80eb7a611a1d67fa285d998f686a88196b0c25d8030a6810ef45692132fce50f50450524a6cca9e868453b","ssdeep":"","tlshash":"6881846fb071a6b44093829f743bbb0c742192189819d510b56adcd47c6cf4b89e6ffb","size":4051,"data":"","first_seen":"2026-04-19T02:47:52.743901Z","last_seen":"2026-09-14T19:20:40.841159Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/cwrumclient-3c0c7d1c41.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c0c7d1c410640a98d53b3e800db9109","sha1":"d6a0fa99a6246af255c15c6c1fef9429b7b94ed1","sha256":"58211190bada881571ae6d5674f3c72966d03f667d5fdc3eb90568d8968a329b","sha512":"15123b10d77a2331cb0900ed8e6cd56bb9dd8552e071998b10590fe8dc35e891ab117d087bc85d3b15b2768f3bfe334c03485363049cdeb9e34280fccf0b063f","ssdeep":"1536:1YrHLQlQr21Pz9v/fN9J2JTFrRyrjMr61tTXtTNr7OBbGUrncrcPrOyrasUuJVhr:X9pX1Pp7VUrn1UYVhBlr","tlshash":"45e33bddb2d5b0364397a6b5d13f1206b33b1998a88c407cb525e5d67cb988e8327f38","size":145495,"data":"","first_seen":"2026-05-17T18:03:30.290126Z","last_seen":"2026-09-14T19:20:40.877523Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/webcomponents-loader.2938a610ca02c611209b1a5ba2884385.gz.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7d9f55830713ddc982a9a67c539f51f","sha1":"b6a8ef12730c4236d93f61bece158480be5d3f13","sha256":"e524d44843e7d1c9ec644402f6d3c2b74655676f373b5c1338807c11afc2325e","sha512":"ed54711a446c5f005b2cb38a37dbd106e38cb35bc5c926918b23ec7e91b8fa23469e19e421d4e89ecfefe4f03ecb16dcd8a15bbbadd213d626f420787f62d218","ssdeep":"","tlshash":"9b514438663597b102a8646e33bff74b36f79565d85a4041440adac87fb0f4be21bcc6","size":2440,"data":"","first_seen":"2023-03-07T22:27:43Z","last_seen":"2026-09-14T19:20:40.85406Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/components/searchautosuggest-ec885890ce.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec885890cea39249a67abc7d22adf41a","sha1":"25dea1b94bee9b6eb865065619664e6c35e1165c","sha256":"7b8b14399d2e8c57153d6e8db8f35761a838556505e702b9aeed5366e2199819","sha512":"708c5c6680b31d9c443fb0fd95e0b2ba454baa7e99995ec445790eec49617cfaba55448b642f0929bf0577e600ee3e2e20aca57e1ec50dbc66ac8a78cf2c927b","ssdeep":"384:lDdMZbWPKf4lkCWsjPZkRuHLkzB8UyRcN2ob9sQC3qkWpGiVSz65:lRN2RuQN8UyGNUDqkf8sU","tlshash":"16923ab6334124359afb0388385f618d71b58956e80c5884f3b7f9a56c64f5d90aff38","size":21212,"data":"","first_seen":"2026-04-19T02:47:52.752717Z","last_seen":"2026-09-14T19:20:40.844433Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/global-base.v2-629127c516.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.806Z","timestamp":1789413605806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/global-base.v2-629127c516.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxdJyP9ta6EZy%2BeR%2FlyZOHckCKrWelsZOTi5gVLNYsmjvYfDzE3NOIomyvJAZUxqxL2Y9m5Y1we4P4pWhwI88Un1wVRwMkcdm7%2Fv67oZnta8ICIvsmezW5ABui6%2B\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-fd3\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3c5830ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4051,"size_decoded":2457,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4051), with no line terminators","md5":"629127c5161d253d081ece39bc1b4b76","sha1":"e606054d81ff27aa6cc1edb05c8949b99eb8ea19","sha256":"e87e9ed402e0c24f03fa4ad338ebea207b075c2e7da4a77bd9b55b9f7dc66b41","sha512":"8bc641abaef1d55691c424756ab05534cc44f5703b80eb7a611a1d67fa285d998f686a88196b0c25d8030a6810ef45692132fce50f50450524a6cca9e868453b","ssdeep":"","tlshash":"6881846fb071a6b44093829f743bbb0c742192189819d510b56adcd47c6cf4b89e6ffb","first_seen":"2026-04-19T02:47:52.743901Z","last_seen":"2026-09-14T19:20:40.841159Z","times_seen":15,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/fonts/AmazonEmber_W_Rg-latin1.woff2","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.005Z","timestamp":1789413606005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/AmazonEmber_W_Rg-latin1.woff2 HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-3c5c\"\r\nexpires: Thu, 24 Sep 2026 19:04:59 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggkootgSpswFCuPdY1BphiaqjgH9ajMvc4hoQH6%2B72yYsD%2BJgeq1qqYmtUY0X5zLfJWATZqhI%2FIxpR36L7T%2FqAqfUeHOmUsgdaCPyP6s0t84eVRAUplQCbAU5MFl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3d98a1ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15452,"size_decoded":16209,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15452, version 1.19661","md5":"230b6132f4b9dfcca3fab70748ce872a","sha1":"b38e48cd6f2faa258093c16b58df5e3ad3cee51d","sha256":"872bf22cb948198d2bbfd1cdf7f977349389ef6d35b55ad4063f82cbcbc5370f","sha512":"e270fb131094e028c4d151f3aab4527528382e3326f21dbefc26225c27093115a1573b2044b64653c54642e8f7c9fb621348e4144203e5b1c752119228812bef","ssdeep":"384:iJoQYm5NHYRcU9MAR7748ePAPLfG+OkHHMTpwHX0Y:iJoQYmDyn9MS7RwkfG+9HHsg3","tlshash":"7662d121364cea614b5382e0c69468f0f6668f90833ccbe16109dbd97166f1777c1dc9","first_seen":"2026-05-17T18:03:30.342298Z","last_seen":"2026-09-14T19:20:40.84302Z","times_seen":14,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/components/searchautosuggest-ec885890ce.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.444Z","timestamp":1789413606444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/scripts/components/searchautosuggest-ec885890ce.js HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ndate: Wed, 02 Sep 2026 20:16:20 GMT\r\nserver: AmazonS3\r\nlast-modified: Tue, 23 Jun 2026 19:57:34 GMT\r\netag: W/\"ec885890cea39249a67abc7d22adf41a\"\r\nx-amz-version-id: wvy1Trcva2hM0mEqfhM8PSb5uEqQUo4H\r\ncache-control: max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nvia: 1.1 31609816d2408b1ea80e31e71665dfbc.cloudfront.net (CloudFront)\r\nage: 1033426\r\nvary: Accept-Encoding, Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 06MJgjwPjrvhMAi5fnHveA5RAaKhkvQ_6oZoYIIgVyxk9KvtJnG4ew==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":21212,"size_decoded":8019,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21191), with no line terminators","md5":"ec885890cea39249a67abc7d22adf41a","sha1":"25dea1b94bee9b6eb865065619664e6c35e1165c","sha256":"7b8b14399d2e8c57153d6e8db8f35761a838556505e702b9aeed5366e2199819","sha512":"708c5c6680b31d9c443fb0fd95e0b2ba454baa7e99995ec445790eec49617cfaba55448b642f0929bf0577e600ee3e2e20aca57e1ec50dbc66ac8a78cf2c927b","ssdeep":"384:lDdMZbWPKf4lkCWsjPZkRuHLkzB8UyRcN2ob9sQC3qkWpGiVSz65:lRN2RuQN8UyGNUDqkf8sU","tlshash":"16923ab6334124359afb0388385f618d71b58956e80c5884f3b7f9a56c64f5d90aff38","first_seen":"2026-04-19T02:47:52.752717Z","last_seen":"2026-09-14T19:20:40.844433Z","times_seen":16,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":16,"connect":10,"send":0,"wait":16,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/abebooks-footer-logo.png","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.853Z","timestamp":1789413605853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/abebooks-footer-logo.png HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\netag: \"6a048390-1d75\"\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oKjir5EX2FOBB5um4ArwcQRNHcQDdYxxBFXpw%2FowJFZl0IXN7FdlKuvghBoZkI%2BFD%2Bi3xN7iAMY%2FcgPhso1KFq3ClH6gCGnHC4Td9sjD9rdXkbYnsVvFLdwa2Ru0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3ca866ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7541,"size_decoded":8293,"mime_type":"image/png","magic":"PNG image data, 150 x 75, 8-bit/color RGBA, non-interlaced","md5":"78d97c44ce90eaf9bd478b31b186df3e","sha1":"74fc52a74e74ef45bc40fb534f81bac54def1acb","sha256":"5e12b50e1359eeecfa6111d0672738338f396f8c7466f36feda2f1abf7d67031","sha512":"6b04e7f768204dd2f88a0a9b7c7935a15157057beae1e18ee0129adeec359a504610368653f5b08ab256e980d5a716b6a7c7839d7bf4a9ac27e52ad6b7bda362","ssdeep":"192:lBSo7HPRw10veMRYV0ht8Nrch9h36tPnpXdVyBtA4s:loKHPKK5a89h3ePnpXfysr","tlshash":"2ff18bfb5e3520cae3c1e7b671f82ba3cca66911570d689430cdb6106b80bc81a9e44c","first_seen":"2024-10-26T08:53:13.437903Z","last_seen":"2026-09-14T19:20:40.845634Z","times_seen":31,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/global/cookie-consent-util-40a661b2df.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.420Z","timestamp":1789413606420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/scripts/utilities/global/cookie-consent-util-40a661b2df.js HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 970\r\ndate: Wed, 02 Sep 2026 20:06:51 GMT\r\nlast-modified: Wed, 02 Sep 2026 17:42:30 GMT\r\netag: \"40a661b2df71bbd63a063997c7f87b12\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: .9lWdaHL152zymHNWRsZLRE_tZir21Pa\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 31609816d2408b1ea80e31e71665dfbc.cloudfront.net (CloudFront)\r\nage: 1033996\r\nvary: Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: oE3KCv7ZlzNq0adpm3hbBuEtBJT9sHP74WEt3pLGl64cHFz62yaFhw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":970,"size_decoded":1609,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (970), with no line terminators","md5":"40a661b2df71bbd63a063997c7f87b12","sha1":"47fe5ada624b168bdce13e6036a6efd120100278","sha256":"755801314e8ba786f740db1a3514a535293d64fe993554d4c2d3b48b9f4465e0","sha512":"badb7ef8a6723f4e929491a2f7dff122c87b271ceb3eafdaecf97e817a75c535bafb675032dffe1f5e58daf7a661b2ccf8b1d043b45de4340253f1022cc8160c","ssdeep":"","tlshash":"0a112180b3c2690882211d3a50a9716f738883372b1cc8096a5240e360a421765fb93e","first_seen":"2026-04-19T02:47:52.714201Z","last_seen":"2026-09-14T19:20:40.846732Z","times_seen":16,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":40,"connect":10,"send":0,"wait":14,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T19:20:04.894Z","timestamp":1789413604894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODrPkGiUYiHPeRGMHp0TQy5ltKX%2F235CmBHmPmGC%2FpQyOnpyxrcVPcPaIObuQUYTgZZwiV%2Ffk5k55aprPO%2FhmzGKuqE5a6c2xssvJ9GV6xf85yNyZbfRAzbJiqvo\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 14 Sep 2026 19:20:05 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf36fe43ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:b164d16592","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":389663,"size_decoded":48892,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1945)","md5":"0d3f8a4742306ae538a36157da9acfbd","sha1":"e50ae9f92ab85e8281d9d01e83e584405c43ada1","sha256":"62bd365ea4d0c5280c8f76022df8d78076c14f205e3b2743369c2dedf4ebfb54","sha512":"b9f0a7c9480174046fbca4a27ac4b8e8ac6b17e2418aacb04130b073385bfd54bc0fb91ccc717622a05728ec0fd195dda87b1ad2d8645451dbf9b5374d61b20f","ssdeep":"3072:1ayVHjdQEmvBqdUeaveeCGgJuDKExbG2ys1mInmwCR2bsvoCk/odXjcScSPA42WP:AyVHjZwCrp","tlshash":"e28407d5fce0041ba25b00f7eeea325e5b76e81bf70bc1c975ad82409f51d92a096b1c","first_seen":"2026-05-17T18:03:30.296553Z","last_seen":"2026-09-14T19:20:40.84928Z","times_seen":11,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":10,"connect":43,"send":0,"wait":149,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/shared/images/common/icons/times-light.svg","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.897Z","timestamp":1789413606897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/shared/images/common/icons/times-light.svg HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 637\r\naccept-ranges: bytes\r\ndate: Wed, 02 Sep 2026 20:06:51 GMT\r\nserver: AmazonS3\r\nlast-modified: Wed, 02 Sep 2026 17:44:14 GMT\r\netag: \"4ac3a6303c72a360054ae8243d218e36\"\r\nx-amz-version-id: Z4.CkR7QRCzZPaI5KfV0Wo8N1eqSj6yZ\r\ncache-control: max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\nvia: 1.1 31609816d2408b1ea80e31e71665dfbc.cloudfront.net (CloudFront)\r\nage: 1033995\r\nvary: Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 0GboHPqS5q8gYHBp9yKgx4sy7ESEMvGj_isvS1V_1Dz-UojzlLa9QA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":637,"size_decoded":1274,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ac3a6303c72a360054ae8243d218e36","sha1":"b98f4361d02a0738490aec692d66b4c29326dc52","sha256":"6c0522cb43501282a9d32a9cb195546e6026ea433b97418354bb1dfa5688d72a","sha512":"92fb504e7a325f2d84d83c94ad0eadc943895dc58fadfa3639984da04b376106111e5185a28b584f412c72121fe32b965fe1f47ba9db0ab25f7a55237e6bd2bb","ssdeep":"","tlshash":"acf028b0e3292d3d306d82e13b1323207fc9869fef58d2cdb52f0460281eb94b007148","first_seen":"2024-02-27T21:22:23Z","last_seen":"2026-09-14T19:20:40.850231Z","times_seen":44,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/bootstrap.native-b164d16592.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.817Z","timestamp":1789413605817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/bootstrap.native-b164d16592.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djIrP56Tc3qavMHuxpXZ7awgvo%2B1GOKGFaGb%2BR0Icrw9Uql%2F7ROaFOd9h3KfvH9N0QkyrA06Xfn6j%2FdpKQ5slak7AX4LN92fBxwsS5JpQfu%2BKk%2FMkAf1Op2i0rRU\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-15e9\"\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c6834ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5609,"size_decoded":2726,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5609), with no line terminators","md5":"b164d1659295b01e378040e8db9b58cc","sha1":"5af99a75d6178b600399c642c2204efef8a46f26","sha256":"2983f595bf116c7580299d8bc3e8e5df660c300b249910cd2e2d466b9b5d2a68","sha512":"c60554a6c6797ba9b95aa0a9f35e5bbe3423190d822f63b9dde992e779dd831bc89e7acf6963958fd3a123db7e372aaeaa832e6cf84d011a0f640bfb4bd14626","ssdeep":"96:huvx7Sh+yHN8s8sHYXG+oQ8DPQS5grQBwDJyg2Qsk6vlp045cKlFzpM8xn:Gx7SEytWs3+oLDPIr4wDaxkklp04BlFJ","tlshash":"d1c164b823243d7405df48fb71feab883a7564b0d8071968a53ddc5a1979d860223fe8","first_seen":"2026-04-19T02:47:52.760678Z","last_seen":"2026-09-14T19:20:40.851823Z","times_seen":17,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/webcomponents-loader.2938a610ca02c611209b1a5ba2884385.gz.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.825Z","timestamp":1789413605825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/webcomponents-loader.2938a610ca02c611209b1a5ba2884385.gz.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1Vs9BokhF6D2uYfNKjtYTE3KHPG7y3Nsgrv9saJJ9H%2BVq1dhMrVHHAoIkCLwoAwt0LHoEYN%2B96uFg%2F3uNEr9%2Bza1OAvf91ppMR4UjQWVjRrMgHxfWD5RrpCU8pH\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-988\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3c783eceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2440,"size_decoded":1800,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2362)","md5":"c7d9f55830713ddc982a9a67c539f51f","sha1":"b6a8ef12730c4236d93f61bece158480be5d3f13","sha256":"e524d44843e7d1c9ec644402f6d3c2b74655676f373b5c1338807c11afc2325e","sha512":"ed54711a446c5f005b2cb38a37dbd106e38cb35bc5c926918b23ec7e91b8fa23469e19e421d4e89ecfefe4f03ecb16dcd8a15bbbadd213d626f420787f62d218","ssdeep":"","tlshash":"9b514438663597b102a8646e33bff74b36f79565d85a4041440adac87fb0f4be21bcc6","first_seen":"2023-03-07T22:27:43Z","last_seen":"2026-09-14T19:20:40.85406Z","times_seen":225,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/x-twitter.svg","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.851Z","timestamp":1789413605851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/x-twitter.svg HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BNms%2FZpNsiYQ8mbOF2j5Cn2%2Bt6W7T1NXalFd2hxZf%2BZmpi2O2FAJq87%2Fwne7%2FsACtGjGqq%2FwGHjbwLMIsQ8ypdyzg8LclCR9ODj9jcZiBvrVJnV4ln1bNIMQ1fR\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-194\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3c9862ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1033,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1212da6d50b0211349c0ec41c76a96f","sha1":"a4c557c84108c2a37ddbc1072a4d11da0a8e3616","sha256":"d8f35a67f2129d433d9a690160ea7f637686033f5055199a7788f1bb500fe0e6","sha512":"e3f76302165e37d459235e2a2346cdb8835f61294edc8ddd1e376dbdf41e728a22e7a31e6f3cbcf2e2de7787c126964b82691bb8a79456ce80ceb8a9ea45b9fd","ssdeep":"","tlshash":"38e0617e4a5848290a5255f13e18510cec5f24e635dc034dd441825b7194a666474f7d","first_seen":"2023-10-27T15:42:08Z","last_seen":"2026-09-14T19:20:40.855952Z","times_seen":312,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/instagram.svg","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.852Z","timestamp":1789413605852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/instagram.svg HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3s9S04V5CIYrsE6M0rAgJni9zttmL9AbC5C5KUGauXj4D3hLMGO6YvxOUcRXwRnlW06K1S0qz4Lc8Ju688qskvEckSRucE3Ed931k7bJnvRjrRokmO%2BVHFBvJdN\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-492\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3ca864ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1170,"size_decoded":1326,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9df55ddea035c2dced531aa0ce32e38","sha1":"1b2c72c3fe7d977f7e63e4cc7e8e3cfebfa0de5a","sha256":"544f45ef277797fbfd606b6793db6826dc8bf61612aedf3dfc0f5320d2c18be4","sha512":"0daf566abe28e051fd31302bd98b8e991f3dc75d5c2feebe157d75412dcd74b41b7754ba1c72e971e6353b07329821d35cfdf42450e58f7c47222ba4b9a905fe","ssdeep":"","tlshash":"5221c73ed3c9c23c0a169bf1dd28c124ac05209f9068939e4e1244f730311dda2bd5df","first_seen":"2023-09-09T22:15:17Z","last_seen":"2026-09-14T19:20:40.857206Z","times_seen":139,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/spinner.svg","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.854Z","timestamp":1789413605854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/spinner.svg HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SlOMvvUTFDU8JH2lLWi12aEXBGSODcvoTajQ9E1qyy%2F2vnoIb81Wz%2FgN4akv3VgplSNNoNfRyM3aiFq6RVEHrD3rUBaggsjZD4lr8NzmXx8FmPbMQpE8xPrzHc1\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-20a\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3ca867ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":1058,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03471414be176d6067d674b29141b7df","sha1":"e0b28621b2f5dcd7c018f527797fcaa28f2a95c2","sha256":"50adb77e1690edc25de00e641e68c943a1b069d6700f0b0e8376aad610e8876a","sha512":"afaac3e50cf004a54bb748a0856d4a75f8a6775c4b2a2e057b16a01b697815e3ef154034fdf87f552ad5cf8a506d26f79ca060cc20eee28e35bf36e7c4e55770","ssdeep":"","tlshash":"44f0d46444b9d905011c857ce3dd3d403c6da153824d01c9b65c2536ef048ab7c7f34f","first_seen":"2025-09-07T20:58:24.787157Z","last_seen":"2026-09-14T19:20:40.858392Z","times_seen":27,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.abebooks.com/servlet/ShoppingBasketApi","fqdn":"www.abebooks.com","domain":"abebooks.com","tld":"com"},"ip":{"addr":"65.9.46.14","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.424Z","timestamp":1789413606424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.abebooks.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 03 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2D:57:D8:64:39:2C:6D:AD:72:16:A9:FD:FD:AB:AC:35:32:B2:C9:0E","sha256":"8A:28:8C:C8:1D:0F:C1:C1:A4:D3:F7:8D:AF:AD:36:4D:C4:AC:50:FC:EB:F3:A3:59:5F:D9:86:2C:E6:41:9E:05"}}},"request":{"raw":"POST /servlet/ShoppingBasketApi HTTP/1.1\r\nHost: www.abebooks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 4\r\nOrigin: https://nbenji.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4,"data":"ac=z"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=iso-8859-1\r\nserver: Server\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\nvary: accept-encoding,User-Agent,User-Agent\r\nedge-cache-control: no-store,no-cache,stale-if-error=0,stale-while-revalidate=0\r\nx-amz-rid: FX5GYNSJHR64EH1TM088\r\nset-cookie: session-id=000-8036239-4786329; Max-Age=34128000; Expires=Thu, 14 Oct 2027 19:20:06 GMT; Path=/; Domain=www.abebooks.com; Secure\nql-session-id=000-8036239-4786329; Max-Age=34128000; Expires=Thu, 14 Oct 2027 19:20:06 GMT; Path=/; Secure\nql-session-id=; Max-Age=0; Expires=Mon, 14 Sep 2026 19:20:06 GMT; Path=/; Domain=.www.abebooks.com; Secure\nabe_prefs=%7B%22modified%22%3Afalse%2C%22curr%22%3A%22USD%22%2C%22shipdest%22%3A%22NOR%22%7D; Max-Age=34128000; Expires=Thu, 14 Oct 2027 19:20:06 GMT; Path=/; Secure\nAbeShipTo=NOR; Max-Age=34128000; Expires=Thu, 14 Oct 2027 19:20:06 GMT; Path=/; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=47474747\r\nabe-subrequestid: 896665ad-f3f3-4050-8785-4c849d82ea60\r\nabe-requestid: FX5GYNSJHR64EH1TM088\r\nservice-request-id: FX5GYNSJHR64EH1TM088\r\nabe-stage: P99 1.0.696\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\npermissions-policy: interest-cohort=()\r\ncache-control: private\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 079d0a29fa76c3721f14a4132ec9e372.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: fOgqoSTC_5QRHSKLXXT5P60mGlLeBqqZ4N-4Whof4eMI96jxYSOfVQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"session-id","value":"000-8036239-4786329","quoted":false,"path":"/","domain":"www.abebooks.com","expires":"2027-10-14T19:20:06Z","raw_expires":"Thu, 14 Oct 2027 19:20:06 GMT","max_age":34128000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"session-id=000-8036239-4786329; Max-Age=34128000; Expires=Thu, 14 Oct 2027 19:20:06 GMT; Path=/; Domain=www.abebooks.com; Secure"},{"name":"ql-session-id","value":"000-8036239-4786329","quoted":false,"path":"/","expires":"2027-10-14T19:20:06Z","raw_expires":"Thu, 14 Oct 2027 19:20:06 GMT","max_age":34128000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"ql-session-id=000-8036239-4786329; Max-Age=34128000; Expires=Thu, 14 Oct 2027 19:20:06 GMT; Path=/; Secure"},{"name":"ql-session-id","value":"","quoted":false,"path":"/","domain":".www.abebooks.com","expires":"2026-09-14T19:20:06Z","raw_expires":"Mon, 14 Sep 2026 19:20:06 GMT","max_age":-1,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"ql-session-id=; Max-Age=0; Expires=Mon, 14 Sep 2026 19:20:06 GMT; Path=/; Domain=.www.abebooks.com; Secure"},{"name":"abe_prefs","value":"%7B%22modified%22%3Afalse%2C%22curr%22%3A%22USD%22%2C%22shipdest%22%3A%22NOR%22%7D","quoted":false,"path":"/","expires":"2027-10-14T19:20:06Z","raw_expires":"Thu, 14 Oct 2027 19:20:06 GMT","max_age":34128000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"abe_prefs=%7B%22modified%22%3Afalse%2C%22curr%22%3A%22USD%22%2C%22shipdest%22%3A%22NOR%22%7D; Max-Age=34128000; Expires=Thu, 14 Oct 2027 19:20:06 GMT; Path=/; Secure"},{"name":"AbeShipTo","value":"NOR","quoted":false,"path":"/","expires":"2027-10-14T19:20:06Z","raw_expires":"Thu, 14 Oct 2027 19:20:06 GMT","max_age":34128000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"AbeShipTo=NOR; Max-Age=34128000; Expires=Thu, 14 Oct 2027 19:20:06 GMT; Path=/; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":33,"size_decoded":1550,"mime_type":"application/json; charset=iso-8859-1","magic":"JSON text data","md5":"6aa5d8551ff25754c760768ff1b8e08e","sha1":"54961e85fbbd657a89812761f5b878bd103d1e42","sha256":"2fde71631dc5ac6368728d185395cbf00d90029bdd162764a0ade670346ce791","sha512":"d4c64d93481e8980b06b1a0c7458f21b9f10bb3fbfaeb8e907656eec7b2b38fe9740c2ff1c53094b31196b9f544535c4ef150934e284dfa7785e920915e40c8b","ssdeep":"","tlshash":"e68004015c0451413757c40153074431c57337011401010010dcc53001405504504544","first_seen":"2025-05-30T17:32:39.535187Z","last_seen":"2026-09-14T19:20:40.85959Z","times_seen":32,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":7,"connect":10,"send":0,"wait":148,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/react18.bundle-8d00f21452.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.801Z","timestamp":1789413605801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/react18.bundle-8d00f21452.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxOQCUAbTcTQ5IswbhKANUaLTqa%2BTdqN8Y41RFF6LLoNH9jSicanzgujZWFbzDhR8JvNKHQW%2FEsf%2Ft4iUF0jFSLTPdwURDt6sTY%2Fw%2BCoJiWsp5Gp8jV94jVO%2F9MT\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-22cfb\"\r\nexpires: Tue, 22 Sep 2026 17:12:22 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c582bceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142587,"size_decoded":47475,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"8d00f214526b2f83cd11b5cb4dbeae1c","sha1":"2d991e0e79862e2cf2938358aaad0677373903b0","sha256":"f5d719aa39dd57fb86f559cf2e209603eb61a64ea88dc641436c90e5f8252336","sha512":"40f6efcb1e7bae687e75e5e35fa7292c78ef10bac9af98e46cb4536aa3330c72fea815b39089b14686f9a4de6cb61d529217704ef84c3458fc434576a857223f","ssdeep":"1536:Uhf51/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:KU55qZpAZxA61iz6Phkm","tlshash":"a2d339e87992f6425ab212ab10ef1047737c9a27784c4cb1e540fedd64b806da17bf8d","first_seen":"2026-03-04T17:00:45.485449Z","last_seen":"2026-09-14T19:20:40.861187Z","times_seen":24,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/fonts/468fcbeda4f4dddfff2e.3af5b8c30a74380709837f8a9d09f0cd.woff2","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.411Z","timestamp":1789413606411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/468fcbeda4f4dddfff2e.3af5b8c30a74380709837f8a9d09f0cd.woff2 HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css\r\nCookie: abe_vc=1; session-id=000-3642500-4049940\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-527c\"\r\nexpires: Thu, 24 Sep 2026 19:04:59 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0fNV1EV8C5NRbkze%2FDbgpyW5VksERwWgy6SB68OBLHHHBwOWudhuLJF3k5F9yPRxcMmHboZG1Q3QSNo4pZh40UOhaPq%2F3ZohGTydmtNFx54xovz%2BmpZhyXqdGHf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf401983ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21116,"size_decoded":21871,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21116, version 1.0","md5":"52695d4ecff02bfdf19e9058ac0b22be","sha1":"92d368759fc904c92acf61b2e083d1cefd78afe0","sha256":"3fd7c6cb70e82ab5f72e76f614e6daf21cae5e00501a44cc2c90ab6f7849b8c0","sha512":"f2a76dabe03cd6e77b6d2f7a1e7f9587dde1478140f34ef81f32d75015af9159d598461b229638d6adb03066094784f3901037e5c8b5d3d3e24b3c4b3e9f82ec","ssdeep":"384:2kVMn7XtCL/UojdB4zNjkHTf6+61JuXc7jFfGvX9RkamQZrsVxgp:uLoz41kzfgnuX4F+Vq/QSrgp","tlshash":"7e92e113d18e4f7aaa1f24ec2a178533ebc757205677607f484f50a9143be49bab068f","first_seen":"2024-10-26T08:53:13.456502Z","last_seen":"2026-09-14T19:20:40.862022Z","times_seen":31,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/PixelRenderer-7a12163030.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.421Z","timestamp":1789413606421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/scripts/utilities/PixelRenderer-7a12163030.js HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ndate: Wed, 02 Sep 2026 20:22:14 GMT\r\nlast-modified: Tue, 18 Aug 2026 21:26:37 GMT\r\netag: W/\"7a12163030ce987109ab0ebf327ffffe\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: ajKeHsdngT2rChLzIEIYq5UY.cAtIgJc\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 31609816d2408b1ea80e31e71665dfbc.cloudfront.net (CloudFront)\r\nage: 1033073\r\nvary: Accept-Encoding, Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: R6szT8vW1n_LUaNEueF2zF8sDoccXeYWVhyie6i0N3-u4fFP1sOy3w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6999,"size_decoded":3000,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6999), with no line terminators","md5":"7a12163030ce987109ab0ebf327ffffe","sha1":"2bc2de6ff7bf940d277e5e8734b6e2feae5a74a3","sha256":"c19fdad23036544d558941f0a3323975ba97730ddfdacd042a7b9bb0ab780e44","sha512":"94102269edb2ea83f9170bc4aa8f1ad8b9f52b65a8af16cfb53572c5b335cc297b473140f9dea90f267a9950bddd29607beda34aeb64fee017526247b8b2d6f4","ssdeep":"192:+WpTHi5Y2TfqjgwSVSwGzxCar1tQJMg6lY5F2aCq+HZIP:dpwTX5aRqF/P+WP","tlshash":"d4e1b92a30d2a51f49c270612d7f375aa17b12b8344e501c79168ed3bd38d4e12afbf4","first_seen":"2025-05-30T17:32:39.537281Z","last_seen":"2026-09-14T19:20:40.862824Z","times_seen":23,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":39,"connect":10,"send":0,"wait":15,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/servlet/RecommendationsApi?pageId=home","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.437Z","timestamp":1789413606437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /servlet/RecommendationsApi?pageId=home HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nbenji.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: abe_vc=1; session-id=000-3642500-4049940\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Mon, 14 Sep 2026 19:20:06 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FAOZt9D9%2Fd8fMs92BKlU%2Fxfjs%2Fs8zb4hI9DdETQISt0QmcCFiv3KBi03HwssNkEQBkbmQ%2FROVlAd7LnuLL0dLvBHmdXdC1PhhFF0P9XYEq%2FLAbXT4qRnnmSNAJW\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf404994ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":809,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"749849fa5a933662d8a09b832e991f58","sha1":"1b15e42e31c4dcb0fc36badca8916c83dcd3078c","sha256":"ecf14b9ebe7061cddc7e2097a66c90692cc9c1d70d96b5f7ebdd14a0dbb61f54","sha512":"2e15fe713225c0c16c82cc564ab19044466003616b1ce79e82cd15b65088f154955e4e7ba1d8bd14d9942dbbdd5bb3313238a3b3d5403f57f01da0075eaa6dc7","ssdeep":"","tlshash":"7dc02b0d3403ba448503005033c321c0c0c7833f64de80114843c083b0ce16ac0ce3ed","first_seen":"2023-11-17T17:11:57Z","last_seen":"2026-09-15T22:49:29.387028Z","times_seen":15600,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/alert-success.svg","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.856Z","timestamp":1789413605856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/alert-success.svg HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=972gcttV5HJQ%2FUu4e58fjontXWBoN44J3f%2BPCiE%2BbC3YRaDSZwTBLme%2FiCDgPAHNTIpkFZkoWOO8O9Z4cbzC5MS47N9wef%2F4L0xgPLWf84iuHyp%2BpIaZPkCuzexZ\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-1f8\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3ca869ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504,"size_decoded":1059,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31063111481cde55dd6fd4f7355adaa6","sha1":"794cca32c4ab8473df5635d76777fa6ba41f5e36","sha256":"0bf8e25e95600ae2cde86d60a61ec70501bec46d94806f1435002f54d9bcae33","sha512":"0b1aa2791352248f502e61de1b7424d9d4585d73e446e10cc3e34ec7028106cfda0e15e630f58012a0947566806358c19fba4e4c82c104c09546a59af235946c","ssdeep":"","tlshash":"aaf09e93223dd037656b4350f675b5362048b97f50a80dd8d28019223cf59e17d4b728","first_seen":"2025-09-07T20:58:24.766118Z","last_seen":"2026-09-14T19:20:40.865663Z","times_seen":27,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/search.png","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.006Z","timestamp":1789413606006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/search.png HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=4,i\r\netag: \"6a048390-10a\"\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0JBR7XX8%2BLGHPVFIG4qRFf%2BHuXfY406BPi9v%2FMUQ0y%2FHiIiNAspeLdLL5X5ECZuOolOrfNNHZw9%2B%2B8ai7rkNiR4V5kDJ8gEGoabSerZ2eL6Qx4H0yTB8NYN1bUoy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3d98a2ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":1020,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"8e58298e4102fa95eb02fcd37fde38c4","sha1":"aca01f38c473f424a511516d5caea00c71f9443a","sha256":"2d7a4d483e6df59b5e41016d35bb2c6f2ab51706f314af558c3d424d0f0a17a6","sha512":"2d63c7a13a2027fb318a072a338a0d7d0983dded093529877a2e288617fa76f77cf2f9fc5f3278764869f66b7a72cfdb9d8d6924a76811c35266078aebcbe933","ssdeep":"","tlshash":"9cd02bd0f2807574d26d1e2a1a064169e7615d0ac113150e035346e95127a5894e5687","first_seen":"2024-10-26T08:53:13.468196Z","last_seen":"2026-09-14T19:20:40.86894Z","times_seen":32,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/scripts/utilities/global/AbeCookie-8954a5518b.js","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.419Z","timestamp":1789413606419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/scripts/utilities/global/AbeCookie-8954a5518b.js HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ndate: Wed, 02 Sep 2026 20:06:50 GMT\r\nserver: AmazonS3\r\nlast-modified: Wed, 02 Sep 2026 17:42:30 GMT\r\netag: W/\"8954a5518bad8520734539f1393f0acb\"\r\nx-amz-version-id: D2vvwUZtf7OOfwreeBr4APHjeBNnRo_w\r\ncache-control: max-age=31536000\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\nvia: 1.1 31609816d2408b1ea80e31e71665dfbc.cloudfront.net (CloudFront)\r\nage: 1033996\r\nvary: Accept-Encoding, Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: WNeO0KLaW2nU4Mb4g25nQ7A7PcmscG0d1588uJS9P_qZ6yJ7w33Fww==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":1031,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1085), with no line terminators","md5":"8954a5518bad8520734539f1393f0acb","sha1":"a181f6c623b3cd0965acdc39deb634da28acd79e","sha256":"e6c3c3304252464645e7d6a5870225cd294e5d72ba05a6a3834c3a9ca232f315","sha512":"9fca92e83911100a0a7cddb84cb8b2efa7a595a3af6d5631c1344649f306a7dd7ce99d3041839af590047f436acd4123851a2fbe9f7d1984639b6b37e6239043","ssdeep":"","tlshash":"b311e2d87da0747cc1050191acac9bf979384d5e58d059049a20b8b079b4c1b9fe7cff","first_seen":"2024-10-26T08:53:13.549431Z","last_seen":"2026-09-14T19:20:40.870789Z","times_seen":26,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":41,"connect":10,"send":0,"wait":13,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unagi.amazon.com/1/events/com.amazon.csm.csa.prod","fqdn":"unagi.amazon.com","domain":"amazon.com","tld":"com"},"ip":{"addr":"44.215.115.167","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.947Z","timestamp":1789413606947,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"POST /1/events/com.amazon.csm.csa.prod HTTP/1.1\r\nHost: unagi.amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 22524\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://nbenji.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":22524,"data":"{\"events\":[{\"data\":{\"messageId\":\"3djjv4-4717xe-1erdko-imzkkx\",\"schemaId\":\"csa_other.Metric.4\",\"metrics\":{\"jsError\":1},\"dimensions\":{\"message\":\"Attribute is not of type string: subPageType\"},\"timestamp\":\"2026-09-14T19:20:06.241Z\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"cvu23b-koyqxz-yqef73-ftanm1\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"}}}},{\"data\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"producerId\":\"csa\",\"schemaId\":\"csa_other.PageEntity.2\",\"version\":1,\"attributes\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"meaningful\":\"interactive\",\"pageType\":\"Home\",\"pageTypeId\":\"HOME PAGE\",\"url\":\"https://nbenji.com/\",\"server\":\"nbenji.com\",\"path\":\"/\",\"referrer\":\"\",\"title\":\"AbeBooks | Shop for Books, Art \u0026 Collectibles\",\"transitionType\":\"hard\"},\"timestamp\":\"2026-09-14T19:20:06.059Z\",\"messageId\":\"lrur3l-qw7938-skxy5-yomlo6\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\"}},{\"data\":{\"messageId\":\"hef9n4-1yoypv-4paemi-5wqexg\",\"markers\":{\"pageVisible\":0,\"navigationStart\":0,\"fetchStart\":15,\"domainLookupStart\":27,\"domainLookupEnd\":37,\"connectStart\":38,\"connectEnd\":81,\"secureConnectionStart\":38,\"requestStart\":82,\"responseStart\":231,\"responseEnd\":237,\"domLoading\":567,\"domInteractive\":1175,\"domContentLoadedEventStart\":1318,\"domContentLoadedEventEnd\":1327,\"domComplete\":2058,\"loadEventStart\":2058},\"markerTimestamps\":{\"pageVisible\":1789413604869,\"navigationStart\":1789413604869,\"fetchStart\":1789413604884,\"domainLookupStart\":1789413604896,\"domainLookupEnd\":1789413604906,\"connectStart\":1789413604907,\"connectEnd\":1789413604950,\"secureConnectionStart\":1789413604907,\"requestStart\":1789413604951,\"responseStart\":1789413605100,\"responseEnd\":1789413605106,\"domLoading\":1789413605436,\"domInteractive\":1789413606044,\"domContentLoadedEventStart\":1789413606187,\"domContentLoadedEventEnd\":1789413606196,\"domComplete\":1789413606927,\"loadEventStart\":1789413606927},\"navigationStartTimestamp\":\"2026-09-14T19:20:04.869Z\",\"schemaId\":\"csa_other.PageLatency.6\",\"timestamp\":\"2026-09-14T19:20:06.059Z\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"}}}},{\"data\":{\"messageId\":\"11cw0-7vy4rl-p9m0w9-4p92t3\",\"schemaId\":\"csa_other.Metric.4\",\"metrics\":{\"baselineMetricEvent\":1},\"dimensions\":{},\"timestamp\":\"2026-09-14T19:20:06.059Z\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"}}}},{\"data\":{\"transitionType\":\"hard\",\"schemaId\":\"csa_other.PageRender.4\",\"timestamp\":\"2026-09-14T19:20:06.059Z\",\"messageId\":\"49yhy5-2bsgjo-jvb8tj-qe21v3\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"meaningful\":\"interactive\",\"pageType\":\"Home\",\"pageTypeId\":\"HOME PAGE\",\"url\":\"https://nbenji.com/\",\"server\":\"nbenji.com\",\"path\":\"/\",\"referrer\":\"\",\"title\":\"AbeBooks | Shop for Books, Art \u0026 Collectibles\",\"transitionType\":\"hard\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\",\"deviceType\":\"DESKTOP\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"}}}},{\"data\":{\"navigation\":{\"type\":\"new-tab\",\"toTabId\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"toPageId\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"transitTime\":null},\"schemaId\":\"csa_other.TabbedBrowsing.4\",\"timestamp\":\"2026-09-14T19:20:06.060Z\",\"messageId\":\"s8c1am-g8bck-dyz33j-vcw62r\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"61vkq9-b8074r-k7dynd-zi7n8r\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"lskg0i-3343q6-n6h6si-fg4fjw\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-homepage\",\"href\":\"/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"rhu6q4-alulrt-d8a7gq-uf4eyj\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"9s8r4p-eg3hzl-w2bbfv-czz68z\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"preference-modal\",\"class\":\"loaded\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"8gacgt-pdb27g-b9wl92-7qyv96\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"yn39bo-rlne93-tju8u6-m6d6bx\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-login\",\"href\":\"/servlet/LoginDirector\",\"class\":\"\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"c4ubgp-c6jx7n-kko7xx-75svzo\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"2145fq-risrrs-tgicxt-hk2i7o\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-my-account\",\"class\":\"hidden-xs\",\"href\":\"/servlet/MembersMainMenu\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"iabmox-d7gs9b-i6b36c-xl176g\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"n6icbh-2choej-xg07u5-xbh0ks\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-basket\",\"href\":\"/checkout/basket\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"88d71i-qcuuwu-lkvieh-4j3uqo\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"6957s8-fw6jc7-e0piit-jqu4l6\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"header-help\",\"class\":\"hidden-xs\",\"href\":\"https://support.abebooks.com/s/?language=en_US\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"cot87p-d6ufxn-3a6ae9-lynf9a\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"lt72ij-a6q0xe-ntsewp-865js1\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-advanced-search\",\"href\":\"/servlet/SearchEntry\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"lfx2ga-yiomjo-y4xrqz-1iuvkg\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"fzfs0t-juphix-icpvl7-1rbm6z\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-browse-collections\",\"href\":\"/collections/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"bi1p1s-e7b9an-b8tl4h-cqg8lm\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"rhzgxv-xstl4b-n9fc97-48j1m9\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-rare-books\",\"href\":\"/books/rarebooks/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"i3tn8x-e1rbv9-w6ls8i-reilej\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"24oe3y-vx2gvv-63aa3j-i1cp1j\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-art-and-collectibles\",\"href\":\"/collectibles/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"538ttb-af71y-2k3h14-iztep7\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"9zkc9e-3u93z-c3dv2s-7uc9ge\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-textbooks\",\"href\":\"/books/textbooks/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"i799ec-o5kcht-mbbbyt-oiji8b\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"bsfojw-49gfat-h5r847-t03rzt\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-sellers\",\"href\":\"/servlet/BookstoreSearch\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"4qrnrg-dq52rc-i04e5a-4hkxit\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"qo80b6-1insl7-5jqwrv-8ysda1\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"sub-header-start-selling\",\"href\":\"/books/sell/\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"qbdwbi-ec9btf-1dg9z2-fe798b\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"4p9qtd-5ep9xx-yzvsm9-7x8pcu\",\"type\":\"slot\",\"slotId\":\"homepagesearchmodule\",\"iSlotId\":\"homepagesearchmodule\",\"class\":\"HomepageSearchModule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"xsjyfn-w6rhv-1l48wt-qxyfr8\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"t0341a-1zcono-6kgc0g-zc8g9i\",\"type\":\"search-field\",\"searchFieldId\":\"an\",\"parentId\":\"4p9qtd-5ep9xx-yzvsm9-7x8pcu\",\"relatedSlotId\":\"homepagesearchmodule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"3iik5q-lb0bmr-wz4cqq-g8788u\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"39hcwj-ifndkl-2d07rl-2jh534\",\"type\":\"search-field\",\"searchFieldId\":\"tn\",\"parentId\":\"4p9qtd-5ep9xx-yzvsm9-7x8pcu\",\"relatedSlotId\":\"homepagesearchmodule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"17gcql-2df1i4-i5dszb-w6lv4y\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"k4xysc-i2hafs-fyq9wk-vbv2xw\",\"type\":\"search-field\",\"searchFieldId\":\"kn\",\"parentId\":\"4p9qtd-5ep9xx-yzvsm9-7x8pcu\",\"relatedSlotId\":\"homepagesearchmodule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"gol7wf-fqgfr0-qk4fig-w35j5t\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"2rcpxl-lmsaax-65jtde-6ighid\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"srp\",\"class\":\"button-primary\",\"parentId\":\"4p9qtd-5ep9xx-yzvsm9-7x8pcu\",\"relatedSlotId\":\"homepagesearchmodule\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"upr08l-ixleks-mqr4lo-a5crsm\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"2pg8ez-cber4j-sojufg-99jrst\",\"type\":\"slot\",\"slotId\":\"listcarouselg\",\"iSlotId\":\"listcarouselg\",\"class\":\"TwoColumnContainer3070-column\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"ecrse2-h00cfk-iyytks-yvfygp\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"tt4f3n-dj5zs3-k58sd2-exeuza\",\"type\":\"item\",\"itemType\":\"listcarouselg-gallery-item\",\"pos\":\"1\",\"class\":\"ListCarouselG-gallery-item\",\"parentId\":\"2pg8ez-cber4j-sojufg-99jrst\",\"relatedSlotId\":\"listcarouselg\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":142,\"pageFirstPaintToElementViewed\":1332,\"timestamp\":\"2026-09-14T19:20:06.201Z\",\"messageId\":\"77yl2w-j76hyp-q8u1i-6b4lcq\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"jyc9ik-ppax2e-hygu3t-ve5eyw\",\"type\":\"action\",\"action\":\"navigate\",\"navigate\":\"books/luxury-coffee-table-books\",\"class\":\"Link LinkWithArrow\",\"href\":\"https://www.abebooks.com/books/luxury-coffee-table-books\",\"parentId\":\"2pg8ez-cber4j-sojufg-99jrst\",\"relatedSlotId\":\"listcarouselg\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":401,\"pageFirstPaintToElementViewed\":1591,\"timestamp\":\"2026-09-14T19:20:06.460Z\",\"messageId\":\"7djdxg-3z5vya-530jt4-n19c1\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"jl306x-9pfyac-1i2wrf-mjf22o\",\"type\":\"slot\",\"slotId\":\"promod5050\",\"iSlotId\":\"promod5050\",\"class\":\"PromoD5050\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":401,\"pageFirstPaintToElementViewed\":1591,\"timestamp\":\"2026-09-14T19:20:06.460Z\",\"messageId\":\"5q4bo9-cxvhnp-m4ccu1-3gvvhl\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"sm3k4x-l8n70m-2z98qd-7xazz8\",\"type\":\"uxelement\",\"elementId\":\"promod5050-media-most-expensive-sales-from-january-to-march-2026\",\"elementType\":\"promod5050-media\",\"action\":\"navigate\",\"navigate\":\"books/rarebooks/most-expensive-sales-january-february-march-2026\",\"class\":\"Link \",\"href\":\"https://www.abebooks.com/books/rarebooks/most-expensive-sales-january-february-march-2026\",\"parentId\":\"jl306x-9pfyac-1i2wrf-mjf22o\",\"relatedSlotId\":\"promod5050\"}}}},{\"data\":{\"schemaId\":\"csa_other.ContentView.4\",\"timeToViewed\":401,\"pageFirstPaintToElementViewed\":1591,\"timestamp\":\"2026-09-14T19:20:06.460Z\",\"messageId\":\"k69b5x-jdonfd-50pbyo-2uuaeh\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"pageType\":\"Home\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"},\"element\":{\"id\":\"f0xmtp-3sqc5-8hae1q-gi6ejc\",\"type\":\"uxelement\",\"elementId\":\"promod5050-media-most-expensive-sales-from-january-to-march-2026\",\"elementType\":\"promod5050-media\",\"action\":\"navigate\",\"navigate\":\"books/rarebooks/most-expensive-sales-january-february-march-2026\",\"parentId\":\"sm3k4x-l8n70m-2z98qd-7xazz8\",\"relatedSlotId\":\"promod5050\"}}}},{\"data\":{\"renderedToMeaningful\":870,\"renderedToViewed\":870,\"schemaId\":\"csa_other.PageView.5\",\"timestamp\":\"2026-09-14T19:20:06.929Z\",\"messageId\":\"52zuky-tk7tuj-9jn97t-lm6t6g\",\"application\":\"PROD:abebooks.com\",\"obfuscatedMarketplaceId\":\"A1851UULDVMTBO\",\"lob\":\"22\",\"producerId\":\"csa\",\"entities\":{\"page\":{\"id\":\"37xyqf-qsejve-51vk8d-8bmvkb\",\"requestId\":\"9615767-8328289-0414303\",\"meaningful\":\"interactive\",\"pageType\":\"Home\",\"pageTypeId\":\"HOME PAGE\",\"url\":\"https://nbenji.com/\",\"server\":\"nbenji.com\",\"path\":\"/\",\"referrer\":\"\",\"title\":\"AbeBooks | Shop for Books, Art \u0026 Collectibles\",\"transitionType\":\"hard\"},\"session\":{\"id\":\"000-3642500-4049940\"},\"surfaceInfo\":{\"id\":\"8da5p2-3pehej-97kpep-hv0ihz\",\"deviceType\":\"DESKTOP\"},\"user\":{\"id\":\"sq86gm-vgb3zt-3kxckb-11dqyj\"}}}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Server\r\nDate: Mon, 14 Sep 2026 19:20:07 GMT\r\nContent-Type: application/json\r\nContent-Length: 22\r\nConnection: keep-alive\r\nx-amz-rid: E5HWEDVQRJRM5RK3PMQR\r\nx-amzn-RequestId: 347d874e-5f08-4754-87f8-90fccc38a574\r\nContent-Encoding: gzip\r\nVary: User-Agent,Accept-Encoding\r\nStrict-Transport-Security: max-age=47474747; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T00:51:41.299285Z","times_seen":18485735,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.829Z","timestamp":1789413605829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wHHz8qR%2BviXkSPC%2FARA44Nuoo3lSEmAgvtFvwh0p1gawqV%2FGEuia175oB3vElqx2efbfEoJMOVFImLGvx48GTdiKLPFbjY%2FeUA5%2FhNNXxu5H%2BIRy2Ca%2FsnU10mpZ\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048390-b87be\"\r\nexpires: Tue, 22 Sep 2026 17:12:22 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c7851ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":755646,"size_decoded":78663,"mime_type":"text/css","magic":"ASCII text, with very long lines (62528)","md5":"48a486910b3e4b300f2e20ccf22d848e","sha1":"6e79522acfdbd27c44ed3d2b84e0f028fbac8837","sha256":"905307ac20f9d0bb5d45e092630a709cc5d48a08814fe21a5f9c7751b639b8a6","sha512":"d6359cf17595a6eed06f1ee63688cb7ab3562d81ab32a9527f69f640f80ccd13fc202e831a7faec8f68def1065e77736f4b5007ab522ac533843672839c9eef9","ssdeep":"6144:0EJSZhQ2DgOlpX2k2ugEhSLD5/5++RhcPKdo7G5oYgrZ6sSY6rYNE3fpE3Slqh5L:0iSh2kjgEhSqRp","tlshash":"e9f4b79c796e223ed8772f5feac81844b27c7702d7812e55fce9424640cdbea7634286","first_seen":"2026-05-17T18:03:30.299239Z","last_seen":"2026-09-14T19:20:40.872593Z","times_seen":11,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/abe-sprite.png","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.008Z","timestamp":1789413606008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/abe-sprite.png HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=4,i\r\netag: \"6a048390-30b6\"\r\nexpires: Wed, 23 Sep 2026 22:43:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRXP5iTMiX45BefTyA45qiSR4LtIMeUnUa848Te8aNcNYVTX6wRPQaAJ4A0ozOE2JK0ZcR%2Fo9Dgzkf6jmgh%2BT38xeOFu%2BgV0N0rqtgV6Z4HJB1iKmDjPqKX2pB9T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3d98a3ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12470,"size_decoded":13221,"mime_type":"image/png","magic":"PNG image data, 82 x 459, 8-bit/color RGBA, non-interlaced","md5":"8a6cd75ee8560bf7ff59264f488c6db6","sha1":"35a9ce67ef85a183b6e2a21e81bbba0d16191e6e","sha256":"07330745561382c48bd0aa5ef738d29ca4967578f6eff94830dcb5af10e13dbb","sha512":"236534ca6605f85a0ab0f6274d98ca7684053cbbd5c7e1e4c79e63b2ba7f67b05408b988c5267bb6777bf4026aabbda67dfba8e6e9c6d2075369e676f2da92f8","ssdeep":"384:fDJ0Kwe+Co79tLVi+T0DQBLeALaRa27oVISN:bJ0fIo79tLVicKQBYJlSN","tlshash":"5842cfd7436f19b611c892a785c53866f0ac271e01ebc497b95f16b038d2ac1b93e71a","first_seen":"2024-10-26T08:53:13.509404Z","last_seen":"2026-09-14T19:20:40.873194Z","times_seen":32,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/fonts/106ba4225232873f12c0.4664da3866680953e1d59d76b27885c4.woff2","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.415Z","timestamp":1789413606415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/106ba4225232873f12c0.4664da3866680953e1d59d76b27885c4.woff2 HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css\r\nCookie: abe_vc=1; session-id=000-3642500-4049940\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-52cc\"\r\nexpires: Thu, 24 Sep 2026 19:04:59 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYTG0b3KjqYlwXzFK2srI9IvH2jxz%2BXy5EOt6wpWm6Ai3%2BXzWSRbDlJ3i6McOcZaYbc9Sgq9QtjOJYygXewwD0JjjAW%2FtAf48FqmP8PVSwuXwf8inl9eT5MIengL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf402988ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21196,"size_decoded":21953,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21196, version 1.0","md5":"8c4d69f0963af4a733718cad6575fae1","sha1":"a8f61b72b7593501b79a026dd601a462e9d02e18","sha256":"9d0d22b4f2a5c902e609ca9281e1c59707f6ad37bef00deb7b1176dd51bbdc1e","sha512":"c51481c2c2e450a77cf1171efbfb7a32b96750d030341965e4ad4604da888defb8c7f9603a57c37b1cc22ff074b6a942558a4094468380da088e20b7ea3c3915","ssdeep":"384:xuVpL7ocYpzRXlU0PEdNb3jYmwzY0nfaH1PJYnKgfmrXh6QVSpNh:MVpL79YpdlUMEdNrjYLssfaVPJYLC6QO","tlshash":"1b92d06c9229dee3c88ed318bbe61543efa89847a6fc0994c5c3464a44f434d9b7ed60","first_seen":"2024-10-26T08:53:13.566792Z","last_seen":"2026-09-14T19:20:40.873759Z","times_seen":31,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/favicon.ico","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.740Z","timestamp":1789413606740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/favicon.ico HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nCookie: abe_vc=1; session-id=000-3642500-4049940; atfloaded=loaded\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=biM%2Bogm5SZQgWmiDdZPv9xft%2BpJqyY52%2BqGk0PUosni14bnueCvzuxNeJ8lr2lXzw77iSTwBX61iqWq%2FcPMj2ecE20FHEjeqXLabE%2FXB2%2FcpBStey5leP6BK%2Bmz5\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-37e\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf423a02ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":894,"size_decoded":1244,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"3d6b629327503dee67c43bbd1214bd30","sha1":"0bd1ea9f3e31f6936e51c4966a7197f1538a2d93","sha256":"423b64894d81f8eb804ca0666208eb629366979f38c048f9a05518f566b2bd69","sha512":"19f3ac1e4872960db8e409eb55e225fe5a83507b025ddd770ef7f3ee77dbacb94ae0e8289d8183878b44331db1193333b43bde1dec540d29b68ec8f9a8218c73","ssdeep":"","tlshash":"0a1184c2e51ee49bd02785f35885665082df1d9ba890290e6880342eebb268b0c2c713","first_seen":"2024-10-26T08:53:13.539877Z","last_seen":"2026-09-14T19:20:40.874385Z","times_seen":30,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/eventbus-e0d54b1290.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.814Z","timestamp":1789413605814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/eventbus-e0d54b1290.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgFc%2BGUoNAvwGS3228%2FKaWm2miAB8h4blw%2Bi3iOB%2BpKn4TT7fmX%2BNurNMwqCBYRD%2BtqLiC9f0XL6dq6P8p6oC8LupuZa8fh5eN6MOHLBhfPoFINDCcpLfWHZdQgL\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-371\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3c6833ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":1145,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (881), with no line terminators","md5":"e0d54b12906320feded4cd310ab06890","sha1":"2a64c6addac3c6b10e968b9d6ab129954dccb216","sha256":"eebdb074ff3f5b4854b7f146cbd18d94853a2a95f467d8d50fb4e3a10fcfef25","sha512":"ef15af58a5b3b0dc63be35c467b970937f93e5bb965691fe084775df23f6c23666773e4086b5c786fbfe536231b2188a52a69f88ef9e5d230e5d53f30859f2e5","ssdeep":"","tlshash":"d311a39c19f0927501da967f7a4d3e5f2192cf9e2015200c729cdecab788d4fe5976b0","first_seen":"2026-04-19T02:47:52.70353Z","last_seen":"2026-09-14T19:20:40.875011Z","times_seen":17,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/productwidget_merch-8ae3fc5eaa.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.820Z","timestamp":1789413605820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/productwidget_merch-8ae3fc5eaa.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7l0mp7UVQdHw0XAS0JfKCoTUzdj8yILUL%2FtMabu7CGXbHwrnIY4Z6aRwKS91xaUe3aXpAcBc3ffnTRdP%2Fhg%2B2NlpnMwjWoNOxNjbMsUC2MUcQa8%2BiQ3Ms6vvQRA\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-fe0\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3c6839ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4064,"size_decoded":2771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4064), with no line terminators","md5":"8ae3fc5eaaf82e4d2a300c4880286f34","sha1":"210bbb0882f4dddb1e0889782ab7a03604cb49f8","sha256":"aca27bc2826407419bafb8b46bc1656002132f5130864affc462602f16e35641","sha512":"1f6f894f907e657b6cc04af45e56f23a2d45414f7483ad5ad5009bb23e60a016d446ac87e4d82f811e94c2fd1594022d2da8e4f302cbd22cc519b39708637a38","ssdeep":"","tlshash":"3c81c9e63658b0711b5775e0c42b348af07106345c9d4a20baa7c0bbf82279f9577b65","first_seen":"2026-05-10T14:16:13.152471Z","last_seen":"2026-09-14T19:20:40.875572Z","times_seen":13,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/fonts/AmazonEmber_W_Bd-latin1.woff2","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.003Z","timestamp":1789413606003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/AmazonEmber_W_Bd-latin1.woff2 HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-3b8c\"\r\nexpires: Thu, 24 Sep 2026 19:04:59 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FidEhb%2B3k%2Fywv2OyigDoH751Tei29q8k%2FViWEa8Gevh7EzdG5T8SZkco49WRhMrp6q%2FME8MPwAYgfzRPnKr%2FZcOfC7KUPTMazDN9UY3dnqTUWDEn1cRjc0Kc%2Fu1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3d98a0ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15244,"size_decoded":16007,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15244, version 1.19661","md5":"b67e8f4344a2a7eb293a4e478fbc88c2","sha1":"961a364b31f69946bce9959a46b1ab4d80347cfe","sha256":"4efb9b046e8152c831775326063ace77b65a1ee6af4b78f02660cc65df565e48","sha512":"2c2d7f59d54e9b79daed7f45a15e4025f94aa1a22fb1d484afcde53ca46a9af18fdd8fd3453da93d8a3c177ebd075111126020abecb8cef8e4cf6a09a223e58f","ssdeep":"384:ZQlW8/fKscJ81kzs/u4R+O9KNvwOO1fUlNuh:Z+/Pceh/IOOK","tlshash":"db62e1f14c82563d94c2d2a2360bd47487e07ae2ebf8d3f349a2561d877121fab82660","first_seen":"2026-05-17T18:03:30.337513Z","last_seen":"2026-09-14T19:20:40.876087Z","times_seen":14,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/global-utils-e3e4047e25.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.802Z","timestamp":1789413605802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/global-utils-e3e4047e25.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBWsngLG%2FQcfIGgxLmSLrQzc8Tto6uNh%2BWd1ZovAReS7IP1tW0Geyb8svpQHyjIXZOBBzDMTPDw8f1L8n9l5NcPcMXQNBixG0eecGLJkQRJSSKS%2FUPlDfob8A%2BGo\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-5774\"\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c582cceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22388,"size_decoded":9089,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22388), with no line terminators","md5":"e3e4047e25afa3c7825558c04e3ca2b5","sha1":"143849b1b5447a462baf1862aa74c8dc83d4aeaa","sha256":"0b73e4f32ddf3620fa1c74debe67f7807870d2412e542daf646290c8e02ac805","sha512":"2fdd12caf8014d23a3c7f8de2a4872a13eeeedfd4e3e12d1f6cd1f74765d5eb72735457fef55c4a6007d199839996f132ffb4837cc79326b813e8f9ab71cdbf3","ssdeep":"384:HiJvpPyJU94xpLu493xeiZ23xx9Ay2HM/q3y9ezpJ53u/jWDvQaX:uhfUlI/9VOLy9eajWDvQq","tlshash":"92a229cd7481f02a476720b1802f6b0e71f5551a7889c4a0f260e8f6acb591f9b7be7d","first_seen":"2026-05-10T11:59:58.021609Z","last_seen":"2026-09-14T19:20:40.876944Z","times_seen":14,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/cwrumclient-3c0c7d1c41.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.824Z","timestamp":1789413605824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/cwrumclient-3c0c7d1c41.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmKeT2NYHwLaZxMprfu3GkMXwnPu%2FbarY6SW3IVkpAYWfmJlszZnRj3xQH3%2Ff6RAPMzMICuCaepdswnshi5Ka9%2BcpoHFqI1TODeAquEKTf%2FsylwQwUMgX5TDBd4H\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-23857\"\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c783bceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145495,"size_decoded":42511,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3c0c7d1c410640a98d53b3e800db9109","sha1":"d6a0fa99a6246af255c15c6c1fef9429b7b94ed1","sha256":"58211190bada881571ae6d5674f3c72966d03f667d5fdc3eb90568d8968a329b","sha512":"15123b10d77a2331cb0900ed8e6cd56bb9dd8552e071998b10590fe8dc35e891ab117d087bc85d3b15b2768f3bfe334c03485363049cdeb9e34280fccf0b063f","ssdeep":"1536:1YrHLQlQr21Pz9v/fN9J2JTFrRyrjMr61tTXtTNr7OBbGUrncrcPrOyrasUuJVhr:X9pX1Pp7VUrn1UYVhBlr","tlshash":"45e33bddb2d5b0364397a6b5d13f1206b33b1998a88c407cb525e5d67cb988e8327f38","first_seen":"2026-05-17T18:03:30.290126Z","last_seen":"2026-09-14T19:20:40.877523Z","times_seen":14,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/fonts/d26713d7962516a8e8bc.1e10a9c699a3c6370777fdcd729573dd.woff2","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.416Z","timestamp":1789413606416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/fonts/d26713d7962516a8e8bc.1e10a9c699a3c6370777fdcd729573dd.woff2 HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/lander/king_crown_throne_castle_guard/css/All.min.800b47662f6255c0dabb07106f1d3e3b.gz.css\r\nCookie: abe_vc=1; session-id=000-3642500-4049940\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\netag: \"6a048390-6c1c\"\r\nexpires: Thu, 24 Sep 2026 19:04:59 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvG2hkakPWiCwtAZ2n7pDQnW12eRZoVI9LDrSRwj5M9D2jBe8wJoYEgXtYekPdtNBZzfzzKav0456NKT6OJ9uxP%2BHtO%2B1sxHByfW1OCoBvGQ5ULdJfSoV3RA1wy1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf402989ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27676,"size_decoded":28429,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27676, version 1.0","md5":"98a6e0018b815621cbb0bb8684c7e131","sha1":"a17dd4c4be49b28640d6e2d7ef347c1fe818aa39","sha256":"1ed1c7da7f60660db3ba608dda15b8e1a3ee7726b8e2800c064e86397f24e36d","sha512":"b7f511908e723958c9a92311181dc0d5df4b1fcb73341d295e125c560cffb0401375820ca3f3a80afb42b14a8d4fab73e6f7c151ae312f98b733b6d4f32efb79","ssdeep":"768:IHxoOBedIEASuYbslVSTyzQlqEU7ogB1+V8psd2Cxi:2uyEDnbsleySIeaaxi","tlshash":"fdc2d14936f1b705a002bc72877e9bfccdb46e85e36be5a1a854adc28f4f85787d1024","first_seen":"2024-10-26T08:53:13.459231Z","last_seen":"2026-09-14T19:20:40.87809Z","times_seen":31,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/to-top-arrow_1.png","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.433Z","timestamp":1789413606433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/to-top-arrow_1.png HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nCookie: abe_vc=1; session-id=000-3642500-4049940\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=4,i\r\netag: \"6a048390-af\"\r\nexpires: Tue, 22 Sep 2026 17:12:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TlQMKSYUzRSOJFW9YOjHvQVQk1UK%2Bp3ztfwW2D12BmzSX3T0y2DG6nBU%2BzBE2Y6qgtqdnXrbv84Efjfhy4r%2F5wsct1MqHIHhcro2gfwy4JL9QNLZimB0kfJbuKNs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf404990ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 175\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":922,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit gray+alpha, non-interlaced","md5":"81d034f6f2f68e83bf4034e63d3bc9f7","sha1":"ed75ba34eab3c0b1b1d7b667f97a8c23db29e4e9","sha256":"3ee623f872edc89a761692967641b9d2aeb55958f2bc07ca640a21d354c874a1","sha512":"63ea9f009db31eaad33259ab13c400e0676fa373190047f2e33561f1f1c9a129831a5346e468e3be75cdf13af42e66f954ae180dfaeaef03948e0b15eb7e2a15","ssdeep":"","tlshash":"97c080fa72515d3bfb558a23c5355261dc23c4048e1f3d11059ac6220e11d841554e57","first_seen":"2024-10-26T08:53:13.469643Z","last_seen":"2026-09-14T19:20:40.878657Z","times_seen":34,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/productwidget_core-78b1a058d2.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.819Z","timestamp":1789413605819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/productwidget_core-78b1a058d2.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TIZ6hrs%2BfDJUsz6l22muyyiAMIBNzrbIsycpfOrd1MAbVIRsvYAiox1jEftnM7Wea%2BDkVFxxJqipoDCIk91qCgAMyitj%2BtsdpV6NrzyPbQDqnSJPlrp3sNX25P9t\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-e962\"\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c6837ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59746,"size_decoded":16978,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59744), with no line terminators","md5":"78b1a058d23b26528a17168f7cbde761","sha1":"c57dbafd4377eff8fd02e68bf73f683247eb9128","sha256":"25583f5b80440ec75971919bbf4f4c18b7dede21840ea9a33e0e356766ea5671","sha512":"834178bbf5cbc7bc22c0d864066a9562556ac209636550da034920c96db5c8df26ace997727e8d768ec82e8f9b4323899550e5d3e1a1d583dc83ac2eae760bff","ssdeep":"768:AJK+E3ftapjvCSuVqFDb40LTBbQulByxreBZbVCpc3t/9hdaO7ui3ORS:AA+IQjvC4N8uryAZbVCpc99hdz","tlshash":"ad43ea84f6b6367de11b4ca8d02fe649743a3604da8e0875b8aaf46255161ec7333fdc","first_seen":"2026-05-17T18:03:30.339072Z","last_seen":"2026-09-14T19:20:40.879198Z","times_seen":11,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/facebook.svg","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.850Z","timestamp":1789413605850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/facebook.svg HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2EZBcZJ0hD7YJlpjoG9tHemDPdZ%2BupqbMXe3kIyUxOTKPTelXfvryu51ZGgBzjRCJ0CieOrPhrNfNq5thq9ln%2FSAT1X6%2B9JadwDuFQxdcrVRgbQKNDeKarXVpm3\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-200\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3c9861ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":512,"size_decoded":1084,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3bf72df5fcac3710e621d88d9f8a8959","sha1":"9e4d0931359aed5ba4660dcee763251535583c54","sha256":"ad3f6a7546902b413908a7a4601703a4f9fa87a2798a7c8c1a1731c0d9b520d3","sha512":"e1f295222aaee31ab3454e165fe96b69662a74e775dca451ca7bbe30682c8793baf92c7a7cd6e95aa636afe1646d0323650e6feb260810ed594bcb84c528d147","ssdeep":"","tlshash":"3ef00eeb0d9442a503c813da1f3c6318bc9bbc8d7c94832ef44146b190a5aa6b074268","first_seen":"2024-10-26T08:53:13.43621Z","last_seen":"2026-09-14T19:20:40.879748Z","times_seen":72,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.prod.abebookscdn.com/cdn/com/docs/CSS/global/base-font-7862cd6d30.css","fqdn":"assets.prod.abebookscdn.com","domain":"abebookscdn.com","tld":"com"},"ip":{"addr":"13.249.8.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:06.436Z","timestamp":1789413606436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.prod.abebookscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:08:AB:C7:41:7F:57:E2:27:1F:18:55:B4:5D:EA:84:BB:3B:17:2D","sha256":"47:23:27:4A:B3:06:F8:D8:50:60:7E:40:DE:55:A3:77:C9:CF:92:E8:00:12:40:AB:AF:1A:78:9B:03:3E:1B:16"}}},"request":{"raw":"GET /cdn/com/docs/CSS/global/base-font-7862cd6d30.css HTTP/1.1\r\nHost: assets.prod.abebookscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ndate: Mon, 14 Sep 2026 01:10:08 GMT\r\nlast-modified: Tue, 12 May 2026 20:17:29 GMT\r\netag: W/\"7862cd6d3036ac0b22f6e4d2d6808f9e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: l9qybudvuVZsR7c5qOUGeS3y30f5hw8S\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 31609816d2408b1ea80e31e71665dfbc.cloudfront.net (CloudFront)\r\nage: 65399\r\nvary: Accept-Encoding, Origin\r\npermissions-policy: interest-cohort=()\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: CaWUEhNTV9wW4xhzgQY5ziq1YSMPd3Cys-A-Edyevu4rbX9Jt_KQxw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":26379,"size_decoded":6117,"mime_type":"text/css","magic":"ASCII text, with very long lines (26379), with no line terminators","md5":"7862cd6d3036ac0b22f6e4d2d6808f9e","sha1":"cd83f076f7cf4fd7b4087e6668c7ffb64a073c12","sha256":"e06f997de9ff9fb616d6692d9e17dbf037f1693efa163756a583252bada9c4d4","sha512":"309a23be5de50a9c547464756c6be21af09ea7858f24b77fc739fb353bb7b67b2cf45dccbd8caa3e8ad906280c6002618b95d84de908c9e35c1a12827c7e5a20","ssdeep":"384:pAZqHw2asEaMa39Q06HOBE/33zPepC79hjDxtSDqZfDVoPR4qluip4LmM0P9eCZx:pLuRmE/HzPHimu52LmM0R2O","tlshash":"65c2c72391610028f0378a2efddfb39d323c9012e6174aeff505a968dad6dda2177e54","first_seen":"2026-05-17T18:03:30.302609Z","last_seen":"2026-09-14T19:20:40.880339Z","times_seen":11,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":25,"connect":8,"send":0,"wait":16,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/All.min.7e6ab57976631cf2500d4b94dc6618e4.gz.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.827Z","timestamp":1789413605827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/All.min.7e6ab57976631cf2500d4b94dc6618e4.gz.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NtKGLPSoiQTry1MRhjpj8kuaH8NepcAVv%2FV8jgyP8BNruNzgduXW47dy2bM0EWoIlVqMrcc65C4ddU6%2BzrXpfkwvR%2FZvV%2BHq%2Flx6zrmHHmJHLji8abGeZ9sqGUN\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-3e533\"\r\nexpires: Tue, 22 Sep 2026 17:12:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c784fceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255283,"size_decoded":70424,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"a4eb2ddb43d32012f665d3eedfa6da1d","sha1":"8af1fb62ac3b20b04b9fd06eddf3919bbefa8fce","sha256":"b863869b47b5fae7517fc5da9ce95b8c4bfe2be51a458f6176359970c81dca45","sha512":"3e14d400ef1d3c400b0b1740dc26ee3fdb3d552eccba3a460e9e55b0786678d2f594cc55571aec1b4bb5756c2d40d226ffd2ec83aa9a999e8677510d04788e03","ssdeep":"3072:KKF7lW2wrkpDgjot8nWLKnTgVoUmcN1o5vNKCB+OEPsRO:KKnW2wrkpcje8nWKTg7Av4CBc","tlshash":"d5443a973346b63242dfa1ebb0664245b236569d6401812cf83cecdf5c68d4a32bbfb5","first_seen":"2026-03-04T17:00:45.409259Z","last_seen":"2026-09-14T19:20:40.881105Z","times_seen":20,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/searchautosuggest-ec885890ce.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.828Z","timestamp":1789413605828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/searchautosuggest-ec885890ce.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LeG63WmAZXTfREZmkNdmQTa4DvZMbbpx7HNGwfCxn4C%2FSH0tEh%2B3mJVMmJeZNCdJ31%2BY%2FaYi%2Bl%2BrmlFCkCH7mBwG672RxC8KsqWcw%2B0z0K9hHHGl06m5bAdDCL9Y\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048390-52dc\"\r\nexpires: Tue, 22 Sep 2026 17:12:22 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c7850ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21212,"size_decoded":8573,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21191), with no line terminators","md5":"ec885890cea39249a67abc7d22adf41a","sha1":"25dea1b94bee9b6eb865065619664e6c35e1165c","sha256":"7b8b14399d2e8c57153d6e8db8f35761a838556505e702b9aeed5366e2199819","sha512":"708c5c6680b31d9c443fb0fd95e0b2ba454baa7e99995ec445790eec49617cfaba55448b642f0929bf0577e600ee3e2e20aca57e1ec50dbc66ac8a78cf2c927b","ssdeep":"384:lDdMZbWPKf4lkCWsjPZkRuHLkzB8UyRcN2ob9sQC3qkWpGiVSz65:lRN2RuQN8UyGNUDqkf8sU","tlshash":"16923ab6334124359afb0388385f618d71b58956e80c5884f3b7f9a56c64f5d90aff38","first_seen":"2026-04-19T02:47:52.752717Z","last_seen":"2026-09-14T19:20:40.844433Z","times_seen":16,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/csa-d403f7adf4.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.803Z","timestamp":1789413605803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/csa-d403f7adf4.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qI%2BvuzFcGO8U%2FUs2bu0GNn7jsQu8vcqZrbYLN40NYUyb9%2FAQzruvnYaushXj%2BRhw1kwDkPAbNyhCfT%2BWeUfz4U9cJzcO7AhiDCMfurEmT1tAVO7PmO8m9UGy0W0q\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6a048390-7c16\"\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c582dceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31766,"size_decoded":13630,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31766), with no line terminators","md5":"d403f7adf45f72a4c120a930c3db5212","sha1":"9b3b66db2e0dcdd9b54aefc2c5f7ff4b972cadec","sha256":"5da646816f30346e2a7c0fa94b644891ce2584254e2fa9803704764a39109fd3","sha512":"43ed74488b6e34f71eba9a3850f8138b667cb6df56cc105933267c3ae978021277219019be90d994c86d3a3365b90abbbd816e357bec2cfb9bee7af5bc56c028","ssdeep":"384:MaoqEt6VPBhJNXKiX5qzBwrycSQ0lt7Xbs9CxPiK2Q7V9LNIzZpB9s1576YmJdxI:MDLONx+k0rrxPl2Bi1t6RY","tlshash":"63e22ad9b5d678331267313aa0af610bb33a23a7344d88519415b9e42dbd7ed8323f5c","first_seen":"2026-04-19T02:47:52.719676Z","last_seen":"2026-09-14T19:20:40.881772Z","times_seen":14,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/sitenavtoggle-e7be457d87.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.811Z","timestamp":1789413605811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/sitenavtoggle-e7be457d87.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWvJESiM6MpyFtKFCvssGIC3waGorxNBh5wFXy0mTWnyjY%2BjgDRFAMwdsvECo3R1h2KmC8wwWB3TxIS1%2Bejdml50%2B0mva202Qqv8MiKXv81ShDRz%2BFhkaoDBSnVU\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-443\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3c5831ceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1091,"size_decoded":1180,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1091), with no line terminators","md5":"e7be457d87e080b399097e44b8936e8b","sha1":"daaea1eef487b7a052df752a06b1ab5c95fb28ad","sha256":"98e0b7c1127f88b442022832d82128cf4de1dc369833f8b371c2da1ef3bf5578","sha512":"61d0c5a60b62b1992e8fab2182849c42dac8ad39e7d2abb464236e276e2ad545b63fc779a7d00c8a9acd87ae9030460ac3abbdf9b30b27a6e2e9a9541d4816bf","ssdeep":"","tlshash":"3611dfbbb61b2c3342d8e4faaa45a6c0a6a08148cad100753d7ea85e00c7ed145f66f6","first_seen":"2026-04-19T02:47:52.782745Z","last_seen":"2026-09-14T19:20:40.882454Z","times_seen":17,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/images/abebooks-logo-com.png","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.848Z","timestamp":1789413605848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/images/abebooks-logo-com.png HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=5,i\r\netag: \"6a048390-111b\"\r\nexpires: Tue, 22 Sep 2026 17:12:22 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mx6VsMxr5jr0Vi9CKO7UHBgD1iNDxTX8OLDQpbvskSam79RmZ73yLlPJ7yZ%2BASYIPp5sAFnvLvCRVdqDuLiXS%2FEfMizoekmBvDzSd5pNPOlMZN05yyQIBVnE6Ed%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b1bf3c985fceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4379\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4379,"size_decoded":5129,"mime_type":"image/png","magic":"PNG image data, 230 x 40, 8-bit colormap, non-interlaced","md5":"0f1d509ed62aaf250a5d8f3357f7fb45","sha1":"49fe45677040f481a092506ae013ccf746a3c355","sha256":"6f10b3994352fcfd36d94a6711f0efdd91f6a563a8cd56927a2b3f48e4c92283","sha512":"1bfa9b4a4fabde10c622672c6005c2dc37d00b63853dcff04f9f9e6db78a94dffb87d8331c8c957a8e662eef0f621d7b3f7c2ec6a1b829a7d01c3d249ee88203","ssdeep":"96:/nX2zVEyD6PbSrqknmWNzPHysQMiHyKBzb+rtyAd6xRou18YBwy6gecuO:/X2vezSmknGtBzb+rt5kxRoK88wy6FS","tlshash":"36915c4cf5756c011349fe82adf5812f2aa35a45d6d0a5769dce8d07a1700f80f2e7c7","first_seen":"2024-10-26T08:53:13.504014Z","last_seen":"2026-09-14T19:20:40.884292Z","times_seen":25,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nbenji.com/lander/king_crown_throne_castle_guard/js/productwidget_recommendations_home-78267ef0b8.js","fqdn":"nbenji.com","domain":"nbenji.com","tld":"com"},"ip":{"addr":"104.21.70.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nbenji.com/","date":"2026-09-14T19:20:05.821Z","timestamp":1789413605821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbenji.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 12:14:11 GMT","end":"Sun, 18 Oct 2026 12:14:10 GMT"},"fingerprint":{"sha1":"DB:E0:29:F5:39:4F:1D:7C:0D:66:87:F6:E8:16:D2:A8:09:64:B9:EF","sha256":"31:4B:29:05:DB:95:20:3E:42:2C:E7:A8:D7:38:7B:1A:1D:53:96:7A:F3:E2:8E:76:5E:D7:F1:C8:A5:D6:F2:45"}}},"request":{"raw":"GET /lander/king_crown_throne_castle_guard/js/productwidget_recommendations_home-78267ef0b8.js HTTP/1.1\r\nHost: nbenji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nbenji.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 19:20:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xa9YSz18fMpV2%2B5l5A%2BCrAvnXPLXkvX8tEqpg6aQ4GLBYeOhTTyiA8Dwn9scSVqNEDuzLFFR3KzS5Iu3vnvKMUr1ypSSohn59XCf86hZY3qUP%2FEYTTa0X0NshH7v\"}]}\r\nlast-modified: Wed, 13 May 2026 13:58:40 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 17:12:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048390-798\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b1bf3c783aceba-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1944,"size_decoded":1856,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1944), with no line terminators","md5":"78267ef0b89855bb2721fa5c51a18775","sha1":"b304965996799dd9bc11f736f075ea5e71020140","sha256":"080b2a57b646ed1b2d2f9ab4df5a6eca898d0b58ab51f86e5e91959e4817f0f1","sha512":"4373a9f09d89f47937e55cf34333838312f70f957890e879c86a0ac9815952360fb2201a1666f72b40b7b6903124ecee68ebb896355548ffbe3c9b256fabd72f","ssdeep":"","tlshash":"bc4165d831c0a48c0253f0a4047fa196936b68915a6ef895c653d0f7bcb83cd8163f5a","first_seen":"2026-05-10T14:16:13.176621Z","last_seen":"2026-09-14T19:20:40.885061Z","times_seen":15,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"nbenji.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"nbenji.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}