{"report_id":"9163f5f4-16f3-40c2-a34f-f13b62a5e51b","version":6,"status":"done","tags":[],"date":"2024-11-03T02:25:41Z","url":{"schema":"https","addr":"skibidifarms.st/","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"skibidifarms.st/","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"title":"Skibidi Farms"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-01-12T02:25:41Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"aus5.mozilla.org","ip":{"addr":"35.244.181.201","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"1998-01-24","domain_rank":2548,"first_seen":"2015-10-27T08:06:24Z","last_seen":"2024-10-30T01:35:30.295592Z","alert_count":0,"request_count":1,"received_data":1221,"sent_data":512,"comment":"","tags":null,"fingerprints":null},{"fqdn":"skibidifarms.st","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-27","domain_rank":0,"first_seen":"2024-11-03T02:25:41.670897Z","last_seen":"2024-11-03T02:25:41.670897Z","alert_count":23,"request_count":23,"received_data":3272258,"sent_data":11682,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"Mnemonic Secure DNS","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"skibidifarms.st/js/xf/preamble.min.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e207974921fbadb3d0bf8711726c6c0","sha1":"fdc0f462897ad9933f140c8fde1cff94dd243d91","sha256":"304e77733a818935ddeb447ed9d6d6d4f16e44b8cc262ee05c89324ee7afdc6c","sha512":"11d464abb636ba2a2236ffa29f30725b2ef8a8e531a699908738d84c88473b18b86a1aa6a6698df49e0aaf1adea62a1769156492ed3272b958c56ac7cc549174","ssdeep":"","tlshash":"bb71c69cb34bf231908b3926a2be711f65275054674404105fa3ca7cfd649f60ab6da9","size":3601,"data":"","first_seen":"2023-05-22T05:19:39Z","last_seen":"2026-05-04T18:50:31.383317Z","times_seen":2737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"632112643e58607e22660133e53f65cee0b12251bd07e150409edc99a6e4fe5073fee9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-05T08:10:37.049459Z","times_seen":325439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/vendor/jquery/jquery-3.5.1.min.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-05T08:10:56.499565Z","times_seen":232948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/vendor/vendor-compiled.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2eb06a066c2b5c9afcf5e8a0b2e06cb","sha1":"acb83165d05afb464ad1953bfe253ff70f814add","sha256":"3507ca14c84cbffccd872e634a84d93f50882c817e66ffdf2643a7ed884a205e","sha512":"4dbbaf1d76aca7098ff7c529df411cd8393eaf0530f09749b4b98e5378b1a64f3048f03eb4254501b907b945f5164f5fea780e9e8b866d97f05b325d916e3bf9","ssdeep":"768:KH8r8GESU7AjBaBY1URnAyqjpblwzgoZiGvF/HHuMWj:PrxE77Ps6niRGvF/lWj","tlshash":"4b13fb2d734131a66357e5b9670f0a0ae13761e99b0bc4a0913ccdd02fb857909e7f5e","size":43704,"data":"","first_seen":"2023-03-07T01:06:52Z","last_seen":"2026-05-05T00:51:05.842368Z","times_seen":4021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/xf/core-compiled.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"30795dd6ac2e6a491cda7f66835b86dd","sha1":"d96dae1449979b53cd88f9827e938e47a75691c9","sha256":"9b3ac0feea940572935c876792af52347e06b26900eb88c4c479448fa319a937","sha512":"25daa3ed39425fc0e72deea228ee408b3ef6010ea7d036159b99c5efd4feab587ed10137df00ac2b924c7b8405a4393fc5a989f05978cb904fbfb5d5a0daa08f","ssdeep":"3072:GlimKrUuUpZudXk1R6AUK8ASq6ng7ZHZQheVcw+RZ1ErPJl:IKeud017uw6ng7HVZA18PJl","tlshash":"10242b4bb6513aa383eb20b4502f3205613699b7b986846c7439dfd28db8e0d6177f3d","size":215799,"data":"","first_seen":"2023-05-22T05:19:39Z","last_seen":"2026-05-04T18:50:31.369878Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/xf/notice.min.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b725cc9681612e5c4a6de094bbe33bd9","sha1":"c2bd0760c401cf86e15fc2b941b14fa7901633e3","sha256":"a5dcfd1d44af85302c19886c111e277273cca860febaae5f8cdb0de61733b44b","sha512":"2ef0fce5b3ca1f240d065983f960582e72d7b5e328f7feeefee40a1279ca276d4fb131cf7ac3be4d01ed2315bca18ca61f7f0342edc344b97a5006a39d05a526","ssdeep":"","tlshash":"8171c74fb2446b8312d7a4a4107759a4527796c5ac86c00cff3bdeedc86f9286922bb1","size":3662,"data":"","first_seen":"2023-03-09T17:27:16Z","last_seen":"2026-05-03T11:36:50.231987Z","times_seen":2396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/nulumia/seotools/tooltip.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"05495bedeed80040dfe568f588effe76","sha1":"82adb6bf7a5f0d4deccfaf8ece20d137aae815b1","sha256":"375dfe7a71526793cf90a45684282c228d55c04d97541faaa4d98ec0a33b3ad6","sha512":"4815344dad7df74dce65c7b630cae35134c78c76813856e2ade09a3272a03d5a69cdc7fb6e0149eab8c7470529b1e646157c2bb9763dfbcae9fa146683ad92b8","ssdeep":"","tlshash":"a0f0467b32399af00616d7b8779ba705a11f8c72b09320337e34b1de58cc80ac271c89","size":525,"data":"","first_seen":"2023-03-12T18:07:40Z","last_seen":"2026-05-03T14:37:04.947653Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"359c44549a11a33cace2abc716c22176","sha1":"0eeed16065d8271e9ede08af4ec89c760efeaba8","sha256":"bb2fbf8ab875c3811c2db7c316e469ae7af98648adb84162591fe5733f39c817","sha512":"5c814d41570d01cf5b46b934a16f40aa6fd1cb40f621db06ae84d3053eab34e6a502fa080b85c42fb0b304cf056552c3f00a52ea2be35f28cf4b68b5dc919f53","ssdeep":"96:M1BzevxpkSQwpWmWva9djylQGvc7U714qS192Yj86:UdeZ4rPaDjylQGk7UB4qOn","tlshash":"46919696d70c10a353f4931f7d3eb6c3af6d026782a524feb54c942e27ea405229f563","size":4256,"data":"","first_seen":"2024-11-03T02:25:45.087934Z","last_seen":"2024-11-03T02:25:45.087934Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"skibidifarms.st/css.php?css=public%3Anode_list.less%2Cpublic%3Anotices.less%2Cpublic%3Aextra.less\u0026s=3\u0026l=1\u0026d=1730283298\u0026k=eeaeb1b44584d878a5d8665ccb085236e0a549cd","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.706Z","timestamp":1730600716706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /css.php?css=public%3Anode_list.less%2Cpublic%3Anotices.less%2Cpublic%3Aextra.less\u0026s=3\u0026l=1\u0026d=1730283298\u0026k=eeaeb1b44584d878a5d8665ccb085236e0a549cd HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2865\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 03 Nov 2025 02:25:16 GMT\r\nlast-modified: Wed, 30 Oct 2024 10:14:58 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/css.php?css=public%3Anode_list.less%2Cpublic%3Anotices.less%2Cpublic%3Aextra.less\u0026s=3\u0026l=1\u0026d=1730283298\u0026k=eeaeb1b44584d878a5d8665ccb085236e0a549cd\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L3%2FSrlqHOmkryynp3Wgj2fiDLZutz%2FvkmZyZWGJh6leT2cdKxBfMTGyo9envo8IbBlMJfHOWgwST6M0LkkFCBbsjC5%2BzL4X4JBg6vTdAdmBcPNspkXOU04IsCqVrUFEjvuQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=374\u0026x=1\", cfExtPri, cfHdrFlush;dur=47\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2865,"size_decoded":11059,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5889)","md5":"7392d4a29c390948a26f42616bb13c64","sha1":"3b7c7113258625ab04bf9cb5c3ae68e13ae778e5","sha256":"ba6f55dcbe4f57d1ef302f03a8606d816ba96de10b48d7965c8075a94684dbe3","sha512":"4f634ed13f1927be417de0c0b983908ded352b9d42ee8111a5943ce9e3668a417d11b80f101eb9a1f14b67c74368c99f88c219bdd035bf7753cc251404ffbeb6","ssdeep":"192:8Ywily9ptGAe8Zj2SPX4YI2EoqRIoOzbHTxfpaa3:8qY1ve8nFqRIoOznhpa+","tlshash":"0632245a88091b8b321bc11fa9d53affa15711e653f225a8d9039fbc8d8f1dd02f4719","first_seen":"2024-11-03T02:25:45.035939Z","last_seen":"2025-03-04T11:26:11.935872Z","times_seen":8,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/styles/fonts/fa/fa-regular-400.woff2?_v=5.15.3","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.701Z","timestamp":1730600716701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /styles/fonts/fa/fa-regular-400.woff2?_v=5.15.3 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://skibidifarms.st/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 168768\r\nlast-modified: Tue, 02 Apr 2024 14:26:14 GMT\r\netag: \"660c1586-29340\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/styles/fonts/fa/fa-regular-400.woff2?_v=5.15.3\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ccy3qMQAh2OFpBNyqKZVdKIxixIBBQ2Vh92PD%2FsbsyQ%2FgLgsPKLJdaAIz9rjsp3krgHdCDh6OzfBs8bfgP9HQyTTziXZkwbN9u%2Fi3iE6lnZXalURFd4%2FQsvG1Nt17RRLCmo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=368\u0026x=1\", cfExtPri, cfHdrFlush;dur=17\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":168768,"size_decoded":168768,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 168768, version 331.-31261","md5":"d8689b99dce7c881d3130f3c91cfefdf","sha1":"fb005c93930c13b3a5f449bbc75ba5ee23f609fa","sha256":"4de49631fe60b17010f7cda29a6236ca6ad6102ea204e5c31d2c1e79ee276938","sha512":"4849e7070de14e388157a974cc802bf04549c900e093de962d4a2ec87a94641a0e9dc7bc59239616608d20894d42eab4f33101d062b841be193aa31e1edcc5a0","ssdeep":"3072:eDhVfviTFk/OYHrrIGCApXWaY7neJcBl1DfYk0PhSYqVWj3a1haRfbcZ1cnIUkyn:eDjsklHrNCAlWaIeJk10pzm1wfC1zr4z","tlshash":"51f323bff8a22db297eef58976447dc849c00661ab10c57d0b2b58a8f0b79dde467304","first_seen":"2023-04-10T05:25:28Z","last_seen":"2026-05-05T07:47:01.974224Z","times_seen":4459,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/styles/fonts/fa/fa-solid-900.woff2?_v=5.15.3","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.703Z","timestamp":1730600716703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /styles/fonts/fa/fa-solid-900.woff2?_v=5.15.3 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://skibidifarms.st/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 136824\r\nlast-modified: Tue, 02 Apr 2024 14:26:14 GMT\r\netag: \"660c1586-21678\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/styles/fonts/fa/fa-solid-900.woff2?_v=5.15.3\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mgJpS9Num3VGCKuxA3AedT5Z7QpjzzXEcgvMIhu3aAE33JONgZ9iJ0ZLQmgfb5rtWvkYgh3SjevcT6uGpuR3a0eDCqMnwla0lw7Za3JZ2NZ4yBp5X66V1FELzuTwarPv%2Fnc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=368\u0026x=1\", cfExtPri, cfHdrFlush;dur=35\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":136824,"size_decoded":136824,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 136824, version 331.-31261","md5":"978b27ec5d8b81d2b15aa28aaaae1fcb","sha1":"76625967fe113a088e0627605b9d1bbfb8a5e47c","sha256":"943efdb4b38963df0653d778f233b55db3e19f44794e4ff944e33b8849dcdb3c","sha512":"362016e192f824ea36565d864ff5ff81f0e1b4d27c33fa9a6b78a47631f53b391dfab013c68a68e39f073bf1ee8977eb22dee794a0a3fd44facb2e66029e4c48","ssdeep":"3072:RpymELRQSMyFiGKkDgjSfiI5FCnKXV9e0IT9OCNc:3y4yjKogjy5FBk3T9Op","tlshash":"c7d312cfe26d1716f883176860876305d63a7b26bfadca2280e5d70d1283bc86d9fc54","first_seen":"2023-04-17T19:02:51Z","last_seen":"2026-05-05T07:47:01.878035Z","times_seen":4981,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/styles/fonts/fa/fa-brands-400.woff2?_v=5.15.3","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.704Z","timestamp":1730600716704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /styles/fonts/fa/fa-brands-400.woff2?_v=5.15.3 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://skibidifarms.st/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76740\r\nlast-modified: Tue, 02 Apr 2024 14:26:14 GMT\r\netag: \"660c1586-12bc4\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/styles/fonts/fa/fa-brands-400.woff2?_v=5.15.3\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nprQZOomGV5MNEC1%2BrNrL2sGl6BBJJ9ED4JHe6UONgIcvRL4haCsckZ6HW7vJRZWH1uuQvfo90OiiycciqkbkA82%2BaI4Gu8uOn%2B1yrzsqEslXs6%2Fw2UVVl%2BXnrdzXcRD76c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=380\u0026x=1\", cfExtPri, cfHdrFlush;dur=41\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76740,"size_decoded":76740,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76740, version 331.-31261","md5":"0511670fe2f5405105a6760294c5c51d","sha1":"61cb879dec4fa97ece0d2a26cd6767c66117841b","sha256":"c2497d559960ba9e1c68f41674e8bc980d3b229155e068bc7f42f157f81c4388","sha512":"5d40e0137977dc9245bdf5dacdebfb943028f579f8391bab44e4d70c93c72e5029f72da336fe2c2a301173a5dfe2b3989a4c23dc4f178135b8b62299a182cebe","ssdeep":"1536:L02TjeihDcnTwHiN40iMr//F4X4alz2cZZvIM3VnAOjjPyunCnJTk9vSNL:L02Tje8cnGQ4hMg4o7gyVvjjPzoxk+L","tlshash":"fe7302a3e68e6457d7a1083b144be02f487d51e9bdd96df7a233cd0d821c3e6b12a711","first_seen":"2023-04-17T19:02:51Z","last_seen":"2026-05-05T00:51:05.849787Z","times_seen":4080,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/data/assets/logo/skibidifarmsyellow.png","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.709Z","timestamp":1730600716709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /data/assets/logo/skibidifarmsyellow.png HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 13602\r\nlast-modified: Sat, 06 Apr 2024 01:18:06 GMT\r\netag: \"6610a2ce-3522\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/data/assets/logo/skibidifarmsyellow.png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rUXqZXUaSdrCT8328KucIa%2FvGkI%2Bba1Vy15wvwbAdmHVm2e7pVJ6tQaqY6WFSAvaKZKzLDiemfjYw4vXK5q45CB0qN5H9VKRr8dD%2BVwNIKvf16AUH5CLfXGZ5wYGEDo7KK8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=25\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=5560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=368\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13602,"size_decoded":13602,"mime_type":"image/png","magic":"PNG image data, 600 x 221, 8-bit/color RGBA, non-interlaced","md5":"1b86bb96c5c227adcf2acfe9d4489c91","sha1":"2bcc007a7ea8fa0d0b960f3aaf059a52e37f9351","sha256":"3feb4b6e02715937ac215b087c19fa5a07d7e7580d1f6ad7278f4898e8ea5628","sha512":"06ad73e3c4921aadb63cbc4d7e82e0e6905c81b4d2876976a02f04ebf559040b2fd76ce52c12872f167ac4b23f9975ccd68a731410ccb8491a53373798a6836b","ssdeep":"384:CgAM/zpb+8vDzy3r0s6zwmwuHMpG+/szSjjoANjma:ClM/IADQr0s6zwmwuHsGERMAFN","tlshash":"4452c0e5f1b6f8878263f117c0ab1f616b309e5a453d0c9f82c4587ea37ce6cc652260","first_seen":"2024-11-03T02:25:45.04247Z","last_seen":"2025-11-30T15:53:59.623318Z","times_seen":30,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1730283298\u0026k=034405c740f279c15adbbc41dfccb627ca90db04","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.705Z","timestamp":1730600716705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1730283298\u0026k=034405c740f279c15adbbc41dfccb627ca90db04 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 85569\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 03 Nov 2025 02:25:16 GMT\r\nlast-modified: Wed, 30 Oct 2024 10:14:58 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1730283298\u0026k=034405c740f279c15adbbc41dfccb627ca90db04\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=f2O3cLJD5jYo7kohHQxkN1hh0Dw9eORyABa6NwymOYsY2brCk3K%2FSmeyZc0SWiUt%2BkhJJnok%2BdMhJ93bQ9mCcU%2FOtuRzVPQEIr9d1gP4V0rF1sXR5smXEE5ou5WcGipedVE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=373\u0026x=1\", cfExtPri, cfHdrFlush;dur=48\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85569,"size_decoded":412406,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63233)","md5":"159c1af07826da54f827a248643c99fd","sha1":"57bb3a8b1d6f6195864574c50f1f13b29c0a8bc8","sha256":"fa198d7d46dcfa39e78e2be1d30a776b4e0a7376daa9e1a774ea6789cdc33f60","sha512":"ed3e401774505738e57e2e342669dcf1d60d4a7dda3fe117b2d9903c1a319bc3ce4d64ae0d8ca7970c214cb58c16895b7196f2227903ddf5d8cc11a7cff8583e","ssdeep":"6144:Pb551EQ3IOn+AyRVRlkQ/p1Ubv/dbUz5C:BFYOn+AyRVRlkQ/p1Ubv/dbUQ","tlshash":"899462b0a01d01c93337c51fab42f27aa5b4f735d1511e8af08b9c9d0edaad911cab9d","first_seen":"2024-11-03T02:25:45.045423Z","last_seen":"2024-11-04T02:49:42.523081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/styles/default/xenforo/add_to_home.gif","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.710Z","timestamp":1730600716710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /styles/default/xenforo/add_to_home.gif HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2181353\r\nlast-modified: Tue, 02 Apr 2024 14:26:14 GMT\r\netag: \"660c1586-2148e9\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/styles/default/xenforo/add_to_home.gif\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WlqDwhA1H5Qdb7vPJldYK6usg2BHnm9xP7KJRzlmdJninLDY37CDKdJIZ9Ca040hsPb1F7CJlhUPbc80G8JC2%2FE6ZVjL2rf5MyiVLWngkz7aUzLK%2FxsDE6WpwalbUCRl6Gg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=369\u0026x=1\", cfExtPri, cfHdrFlush;dur=52\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2181353,"size_decoded":2181353,"mime_type":"image/gif","magic":"GIF image data, version 89a, 222 x 480","md5":"7008065c958ac61245a44d1724536881","sha1":"33cf6fd52fc878ee1cb2340c19136c00922657c5","sha256":"d0a8807a1cf3e470eb7caac77125e34df6af969040cbbc643f472257a3016c9b","sha512":"de535dfc489c14c61fa899497450830a40855ef72e5db773bbf3bf364a934aaf9c21bd1098f21a5f21f7020bfab980aed3c3f0e545cb0909e480e5f87299acba","ssdeep":"49152:O4GWDTTiAHeZoYeyK02zn5hBWpaMDdjmkuadD+EMcf:O4GWHuAHGehQpaIdj9ug+EMcf","tlshash":"75a5126fe03e49426c1a0128252d07a55d2fc07e94baea37219cff964b47a7e3dd0396","first_seen":"2023-05-22T05:19:39Z","last_seen":"2025-07-23T17:37:53.026234Z","times_seen":97,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/data/assets/style_properties/sfbg.png","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:17.171Z","timestamp":1730600717171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /data/assets/style_properties/sfbg.png HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1730283298\u0026k=034405c740f279c15adbbc41dfccb627ca90db04\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 11839\r\nlast-modified: Sun, 07 Apr 2024 10:39:38 GMT\r\netag: \"661277ea-2e3f\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vCjkyAU%2BwbIXAOD3OymVTY8cqtE1iUYDM9vgr1L1uxyNkA%2Bhlu56n4BxrJa1pEaHamLJOE%2FR1BJoC3gBbdTcdN6qqyw%2FW3DJx369FgPrJ5qN4NMFWIgGU1HAOIiBVUja2Fc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9b25bb056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19922\u0026sent=2492\u0026recv=73\u0026lost=55\u0026retrans=56\u0026sent_bytes=2931351\u0026recv_bytes=9766\u0026delivery_rate=1680505\u0026cwnd=510479\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=848\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11839,"size_decoded":11839,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"5777eae7fbf0345ae1a60fc415c9b13a","sha1":"241d24197b9c9655f05f7cfd6eab35560ebc4714","sha256":"c0b953322fa2eb6fb20da1acf6735e0702bae8fd05a96cd6800455a2d890860f","sha512":"109fc9491b314d434bf27e2b6c26940ee6a4823eb4e835a89b195043f67172c1022bd0adfc507e53cfec52f5b53ddbcab42f3524f5c6a042e5c23d78ec86866b","ssdeep":"192:nS7PBjaaMNGZ31cMVSMmkRvupeGt5UCA0csg5xs0khtlUPhmdhJWv3/+M4mrn1y8:SLKEJlsk5utYh5q1VGKLA/V1yFEwK","tlshash":"8232d06fa1ec3928e1a1315fc253365553cb801f869b0876c410aab335f1fb1e639cc6","first_seen":"2024-11-03T02:25:45.052644Z","last_seen":"2025-11-30T15:53:59.651388Z","times_seen":32,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/data/avatars/s/0/56.jpg?1728727685","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:17.279Z","timestamp":1730600717279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /data/avatars/s/0/56.jpg?1728727685 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3855\r\nlast-modified: Sat, 12 Oct 2024 10:08:06 GMT\r\netag: \"670a4a86-f0f\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/data/avatars/s/0/56.jpg?1728727685\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gFXZdXwiY2YvSv6QrwDeA5CL61lUtyt1zTRL8YNAbwo6ObWnMCc%2F9eUl8lKzQnbCznj8DhEssiw6elTqa7Drg7PjCUgWupuWM30cUsvcZVRVyWJPckDb5kyOkrOrUd9PI3k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9b2fbff56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19555\u0026sent=2503\u0026recv=74\u0026lost=55\u0026retrans=56\u0026sent_bytes=2944154\u0026recv_bytes=9812\u0026delivery_rate=79572\u0026cwnd=510479\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=952\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3855,"size_decoded":3855,"mime_type":"image/jpeg","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2dafe2662a46188314e0a3f7379cb9f7","sha1":"4339a4968779c06e33acfa110a7b365fffffe280","sha256":"a49d758e861e2d1474ac5c3b7c4eabfd8ba14e2928cb7413b3af9557074e0051","sha512":"43c63a1fa3e5a02ba8a08579d7cb8c17001e4271609ce5123574587b5422827c8bd3557c93a0e55e5ad04ec83db1ec27ff78cf1b4b009d0412fddaef6a006689","ssdeep":"","tlshash":"7c815d964cce98bed4168151bab843ddd425b98c20e2482293b8fdaa5f2a019dc3b539","first_seen":"2024-11-03T02:25:45.055264Z","last_seen":"2024-11-04T02:49:42.550148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/data/avatars/s/0/65.jpg?1729334464","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:17.283Z","timestamp":1730600717283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /data/avatars/s/0/65.jpg?1729334464 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4734\r\nlast-modified: Sat, 19 Oct 2024 10:41:04 GMT\r\netag: \"67138cc0-127e\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/data/avatars/s/0/65.jpg?1729334464\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yQBvLjkqph1tcTZ%2FqnCOeGrsOnaxsfIKu388BfLEmIZsInmiGUAfphw6sGJXAksK9gGYhul8QtiwKbNdnSw%2F%2FHbpM2cUYp8SuJHYF%2B87KCpEI%2BFQB1e2DlUtyz67rm7J%2BXo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9b30c0256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19555\u0026sent=2507\u0026recv=74\u0026lost=55\u0026retrans=56\u0026sent_bytes=2948865\u0026recv_bytes=9812\u0026delivery_rate=79572\u0026cwnd=510479\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=952\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4734,"size_decoded":4734,"mime_type":"image/jpeg","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"1eec086540d6a162708617ff13cf20db","sha1":"8a0c562918ba7b9c0a573d20a627ac78042486f7","sha256":"1839e730d1431254daa33bd2c98b32b9b81b3a0792fbfe47b17efbfecb308815","sha512":"808b76a185ea06a9476ff2c714bce091569b816b4f80194e142896855c72ecccb6636725ebff695395cb127e1e415848d22bd4536fbd2c8b2aa863264a39cc51","ssdeep":"96:c2AVK6BFmUAMoszcqSBTZPiGdZl9TNsmOMBafiePZQWN+BUfJLc:YXBzcqSqGdZl9JsmLB+TQWIWBc","tlshash":"0da19fe728f57c5185e97c9292bba09a2413508bc10a53447333e6ef754bc915cf355e","first_seen":"2024-11-03T02:25:45.057625Z","last_seen":"2024-11-04T02:49:42.558969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/data/avatars/s/0/4.jpg?1719099429","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:17.281Z","timestamp":1730600717281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /data/avatars/s/0/4.jpg?1719099429 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5023\r\nlast-modified: Sat, 22 Jun 2024 23:37:09 GMT\r\netag: \"66776025-139f\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/data/avatars/s/0/4.jpg?1719099429\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Px3gZmzjny%2F7xCZCXmrurWnDE8YI%2BPTdRvQhpNsT4B391lE8dEBOxSgj3jpGv677czBFFDdsAb0IgQFye5LrNRo%2BY40GcfTyobkMoEqGslM33LH1xftg5DDR0sgjMRW%2BqEA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9b2fc0156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19555\u0026sent=2512\u0026recv=74\u0026lost=55\u0026retrans=56\u0026sent_bytes=2954494\u0026recv_bytes=9812\u0026delivery_rate=79572\u0026cwnd=510479\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=953\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5023,"size_decoded":5023,"mime_type":"image/jpeg","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"3a0f90320e4f35b11300eca9985b99ef","sha1":"88b9022702c0ef08f661a741d4d405f5a2e0a9e2","sha256":"275cf23698a9b18549d5f77c0ae78534ac7311dca64a442c796b8c61706cb689","sha512":"2a79ac75f40e1a0e5736f52375d85c38279e816d6cc26dd08d05347f5440e821e0685f84545ddb7dc48579b32d5cb725ec2aea5bccb7a7bd17af2712060c76fd","ssdeep":"96:gukN3Uzj5xUSgqMySCB6iI27IXcugkh7Mc9Jrp+iRJZ/mx3j:gvN3WPdgH5CB6iUMF4zrPp/mx3j","tlshash":"b5a18ff9ab43c173a434c2bc1533949977711020a109ae498d375775fb93d279c9c112","first_seen":"2024-11-03T02:25:45.060825Z","last_seen":"2024-11-04T02:49:42.539606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/data/avatars/s/0/73.jpg?1729609483","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:17.284Z","timestamp":1730600717284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /data/avatars/s/0/73.jpg?1729609483 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 123574\r\nlast-modified: Tue, 22 Oct 2024 15:04:54 GMT\r\netag: \"6717bf16-1e2b6\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3%2BGzSB5IX4ti%2F5wW3CUycuI9s6Y8Nr9UJrRYSCsAAI7%2F4PcP%2BTjTfBKIn2m3Udlri15%2FaParDERqwbPzA2MeS03WiqcOPHR5BuBdRmzxAJVAe7WjK%2BlULsq4HgVvMBlmcuc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9b30c0356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19555\u0026sent=2517\u0026recv=74\u0026lost=55\u0026retrans=56\u0026sent_bytes=2960409\u0026recv_bytes=9812\u0026delivery_rate=79572\u0026cwnd=510479\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=954\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123574,"size_decoded":123574,"mime_type":"image/jpeg","magic":"GIF image data, version 89a, 48 x 48","md5":"3ec50de8b9365af8aff29f1e95f2a81e","sha1":"777229856e2df8c9555ba888f02d947e4b051349","sha256":"865dba974f2e9bba93c8d24651b63dbd1cf08338956fd973cbc835d430edaf76","sha512":"03d9186e6b1f6b050668ac0126b07b5c41ab0fc680ed6313b5a98214f4b9d2e9b40accd11ce351549c0d8abc67626f0540a0c086e959a86b9ae48a004e23889d","ssdeep":"3072:zIkp+T8megrn8oYns+Eh84ttX1tYixp6OHBVPbpAg0jCQ:JpSuns+Ehb1tYsjp30WQ","tlshash":"6fc3010fd868851ce8665b3ad2bc74b3dc0de5ff65c550426a062ad8fd2b09a183f36d","first_seen":"2024-11-03T02:25:45.064783Z","last_seen":"2024-11-04T02:49:42.563716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/xf/preamble.min.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.707Z","timestamp":1730600716707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /js/xf/preamble.min.js?_v=07dab770 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 14:26:13 GMT\r\netag: W/\"660c1585-e11\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/js/xf/preamble.min.js?_v=07dab770\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kCMwVkqCGINyVzjR1%2Fvoo%2BMgTMvImGvTB6ocJvVEHLdmwFHfJcKkGh%2Fw0ViiHqckcpmN2er07GHRpT%2Bv7jSW5vNGKLCCUEHvD1KiMMwltRrGUL5GA2wJB%2BrPm%2Bd7rOPHi5M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6856c6-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=368\u0026x=1\", cfExtPri, cfHdrFlush;dur=53\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3040,"size_decoded":3601,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (530)","md5":"6e207974921fbadb3d0bf8711726c6c0","sha1":"fdc0f462897ad9933f140c8fde1cff94dd243d91","sha256":"304e77733a818935ddeb447ed9d6d6d4f16e44b8cc262ee05c89324ee7afdc6c","sha512":"11d464abb636ba2a2236ffa29f30725b2ef8a8e531a699908738d84c88473b18b86a1aa6a6698df49e0aaf1adea62a1769156492ed3272b958c56ac7cc549174","ssdeep":"","tlshash":"e671d79c739b7735e19b3936926e620b21635090e65808105e23cbb8be60af7047b9ad","first_seen":"2023-05-22T05:19:39Z","last_seen":"2026-05-04T18:50:31.383317Z","times_seen":2737,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/data/avatars/s/0/81.jpg?1730517093","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:17.289Z","timestamp":1730600717289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /data/avatars/s/0/81.jpg?1730517093 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1407\r\nlast-modified: Sat, 02 Nov 2024 03:11:33 GMT\r\netag: \"67259865-57f\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/data/avatars/s/0/81.jpg?1730517093\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BUYnspM3QW51sUv%2Bg27bcKIJTHw0hsMKWKsJY%2BzV4BXwKR77AZmEcS66aaRo8logTT3RJhlztEoInMFbWPN606nD0QGhYVgoym8AK%2BJ2a90WI%2BkkCSGOM8SqgJ2I5LLV%2Brg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9b30c0756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19555\u0026sent=2626\u0026recv=74\u0026lost=55\u0026retrans=56\u0026sent_bytes=3090023\u0026recv_bytes=9812\u0026delivery_rate=79572\u0026cwnd=510479\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=957\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1407,"size_decoded":1407,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 216x216, segment length 16, baseline, precision 8, 48x48, components 3","md5":"eb3f2c48c72b9971f0b96b7c5f2dc111","sha1":"1ed4618968fe543eab7d70bface6fe402eeb4272","sha256":"b2baf9260962c2549e37bd772af362ddea23d57a385ac0cb0d4214bf869db82c","sha512":"6d3ac0550d145c1546f896137cfdc6fae7456b514a4343f61135ef667f7cafbbb6658531797ec6b8f364133b872af485951b03c4a19ff6a244681e6988e2afd2","ssdeep":"","tlshash":"d621055aee1a7aa1c53e0732e30c1f305383eb1070828904c6ca68845b6f189ce180a2","first_seen":"2024-11-03T02:25:45.069984Z","last_seen":"2024-11-03T02:25:45.069984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/favicon.ico","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:17.474Z","timestamp":1730600717474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:17 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 05 Apr 2024 11:43:38 GMT\r\netag: W/\"660fe3ea-10be\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/favicon.ico\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vwXmeH%2FyQsy1dtqlCPyw1jZfio8WOyrrfjV1VE%2BWGBEKb6IZ19ax9Ey9X8nltPrblUPFPZTZ2RrJVFm9RMshrSwFj0voLR4DJI2UnkecObDpNtm9t3Op3tHMrhUAbuLf%2Fwc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9b43c7556c6-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=20427\u0026sent=2629\u0026recv=79\u0026lost=55\u0026retrans=56\u0026sent_bytes=3092262\u0026recv_bytes=10288\u0026delivery_rate=8327838\u0026cwnd=510479\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=1150\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":737,"size_decoded":4286,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"e1ebf71bff8f56eba2ad1793bf032c50","sha1":"18f7287a6ac9bd5f03e99ee225a3d54837f55d42","sha256":"01706115573302aca1867053486acde9c56c99f4587d35edb0590f8d7dfba092","sha512":"a30a6a799ade7f821dc38fe246527e6d9b9583b4ec86d3431a13fb0e88a8e6b3444053d605c425bb73a5f24babf55856ffe7329603c79c1038e164d1d2147a46","ssdeep":"6:sfyldja2za2Dqzm2Tqzm2Tqzm2DiXDmjy2Tq2jqqq2Tmjqqq2Tmjqqq2Tmjqqq2B:suZzD6glIIIIIIIIIAXUUUUNiE","tlshash":"b391c9803228d0ccc5060a30cc03c3fe12297ce0ce2096833ac03fcf3e310898621226","first_seen":"2024-11-03T02:25:45.072501Z","last_seen":"2025-11-30T15:53:59.621419Z","times_seen":34,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/nulumia/seotools/tooltip.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.717Z","timestamp":1730600716717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /js/nulumia/seotools/tooltip.js?_v=07dab770 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 07 Apr 2024 03:10:04 GMT\r\netag: W/\"66120e8c-20d\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/js/nulumia/seotools/tooltip.js?_v=07dab770\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=634xr7%2BuXQt6sWnoH9cLJdqwTS6qYLBDwW1Ho6jdcr2oO0LnT2%2FZoFGJDwGTawXbjZqmKCSnyKSZTfcW7LpDz76z7nx60tAhJA0BupN080Vi6z5eVS0cSH4unJen81Q%2FTfo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af6a7456c6-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=375\u0026x=1\", cfExtPri, cfHdrFlush;dur=66\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8021,"size_decoded":525,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"05495bedeed80040dfe568f588effe76","sha1":"82adb6bf7a5f0d4deccfaf8ece20d137aae815b1","sha256":"375dfe7a71526793cf90a45684282c228d55c04d97541faaa4d98ec0a33b3ad6","sha512":"4815344dad7df74dce65c7b630cae35134c78c76813856e2ade09a3272a03d5a69cdc7fb6e0149eab8c7470529b1e646157c2bb9763dfbcae9fa146683ad92b8","ssdeep":"","tlshash":"54f095b7560e58c00357517c158abb85a46d553380c364777c3451e9fdc8a0f82759d4","first_seen":"2023-03-12T18:07:40Z","last_seen":"2026-05-03T14:37:04.947653Z","times_seen":146,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml","fqdn":"aus5.mozilla.org","domain":"mozilla.org","tld":"org"},"ip":{"addr":"35.244.181.201","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-11-03T02:25:35.450894864Z","timestamp":1730600735450,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1\r\nHost: aus5.mozilla.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\nrule-id: unknown\r\nrule-data-version: unknown\r\ncontent-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2024-12-12-13-36-01.chain; p384ecdsa=3WGhI7iTUk1I87wa-7j1h4UMmF8s2f_FMr57jM6Q-vpg2CMHHld6DmTYxWWTBq_NPFc0K2XY9lNr3PMBJ6tnuRfEk1-mjtmA33ixxGWzL5EnePDoPxY86iN8BZEZMEfJ\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\nx-proxy-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Sun, 03 Nov 2024 02:24:30 GMT\r\ncontent-type: text/xml; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-length: 444\r\nage: 65\r\ncache-control: public,max-age=90\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":444,"size_decoded":721,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (332)","md5":"3b324dec137a87ef7e24a30a65b13dd0","sha1":"c0faa95b2f1018e264b3a14aaf50d1003e6c27b3","sha256":"6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463","sha512":"eee5d0a6354c5cfafdba69236359dbb38be1d7cbfd841230c07617fa3d8982751d8ddbe4f3b9c533a277e836b28a2f483d8ddc79aa09573ca9d49fc16341c061","ssdeep":"","tlshash":"54011069bdb5f89100860aa76626c8015a232287e1541888b8df5fc04f9b9b4536f09d","first_seen":"2023-10-13T18:17:52Z","last_seen":"2025-06-20T01:29:36.566077Z","times_seen":185315,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/vendor/jquery/jquery-3.5.1.min.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.713Z","timestamp":1730600716713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /js/vendor/jquery/jquery-3.5.1.min.js?_v=07dab770 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 14:26:13 GMT\r\netag: W/\"660c1585-15d84\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/js/vendor/jquery/jquery-3.5.1.min.js?_v=07dab770\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hUez8ri%2BHytbX3bkYxIPVelryHhN9NQMD4OxaQ2B0coXcCZ1CHTnkFwNkoKpArYSxuHmDF5%2BzPXCyPrtBBtU0mKx27btQdHMVknvKFDLrNknfYXLI2snHI2YWPFjETioWYQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6f56c6-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=376\u0026x=1\", cfExtPri, cfHdrFlush;dur=63\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89476,"size_decoded":89476,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-05T08:10:56.499565Z","times_seen":232948,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/xf/core-compiled.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.715Z","timestamp":1730600716715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /js/xf/core-compiled.js?_v=07dab770 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 14:26:13 GMT\r\netag: W/\"660c1585-34af7\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=v6qO4uMDCMr%2FJL6ujPXtsYFRZWPVcTo98YnWrNh2jMuB0U9mFhN3HvN21v1wx0yDcfQ8dqzHl352qSxDdnl8Q84NJpfn%2BzzVKbrrvFF%2BBn%2BXly%2FtiCqBqURp9i4hM%2Fe8do0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af6a7256c6-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=380\u0026x=1\", cfExtPri, cfHdrFlush;dur=59\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":215799,"size_decoded":215799,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (604)","md5":"30795dd6ac2e6a491cda7f66835b86dd","sha1":"d96dae1449979b53cd88f9827e938e47a75691c9","sha256":"9b3ac0feea940572935c876792af52347e06b26900eb88c4c479448fa319a937","sha512":"25daa3ed39425fc0e72deea228ee408b3ef6010ea7d036159b99c5efd4feab587ed10137df00ac2b924c7b8405a4393fc5a989f05978cb904fbfb5d5a0daa08f","ssdeep":"3072:GlimKrUuUpZudXk1R6AUK8ASq6ng7ZHZQheVcw+RZ1ErPJl:IKeud017uw6ng7HVZA18PJl","tlshash":"10242b4bb6513aa383eb20b4502f3205613699b7b986846c7439dfd28db8e0d6177f3d","first_seen":"2023-05-22T05:19:39Z","last_seen":"2026-05-04T18:50:31.369878Z","times_seen":740,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-11-03T02:25:16.195Z","timestamp":1730600716195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Sun, 03 Nov 2024 02:25:16 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: private, no-cache, max-age=0\r\nvary: Accept-Encoding\r\nset-cookie: xf_csrf=JnmaIKhiwr3rx6-j; path=/; secure\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8p6fdrX%2BONBDXDhKXP%2FF9u17VoHe1zIJhhPW1yGLkfnjv%2BOJg1ukmC4qmD%2Fr8gHOsqMl9Tr5TOYYjmvTomYDqB41UJbLoNAYSXt3wpq%2BCqRt3MehGXvAikELRLuUoNsHMMA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8dc8e9accf48568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=21960\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3210\u0026recv_bytes=1117\u0026delivery_rate=261607\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=80a5faaef1582658\u0026ts=196\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65238,"size_decoded":65238,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T08:09:51.362598Z","times_seen":14678067,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":88,"dns":35,"connect":17,"send":0,"wait":180,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/data/avatars/s/0/11.jpg?1716849202","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:17.288Z","timestamp":1730600717288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /data/avatars/s/0/11.jpg?1716849202 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1359\r\nlast-modified: Mon, 27 May 2024 22:33:22 GMT\r\netag: \"66550a32-54f\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/data/avatars/s/0/11.jpg?1716849202\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mA6JqLd1SHme%2FY7%2BHJgFODMtYOUajEDyfQlEfsY1ug27kzGkHOI%2BEZEWvKiwoTdYxp%2FkXbC5LTw1Gy8JV4UbbCvdQytuLYiwtu%2FGhazMVFja15kvHeDkj7RBOGP24vAgu6Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9b30c0656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=19555\u0026sent=2624\u0026recv=74\u0026lost=55\u0026retrans=56\u0026sent_bytes=3087852\u0026recv_bytes=9812\u0026delivery_rate=79572\u0026cwnd=510479\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=956\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1359,"size_decoded":1359,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 48x48, components 3","md5":"412a4aa6bef698d69e0248a5224cae90","sha1":"5e83aa9d7593d94827f2082bee6209921fcf0d03","sha256":"e2438f3891a01d414385d095df3424482369a6f6fc1006f1c5b244aa9817ef98","sha512":"966152e52487dbcd10fec51066da3b5c6f0422aa6296497afd6e2c293c842ecf5312efca2b7aacae14f827832886ade17f6b1d1a4f7268b10fbb4be403bb7939","ssdeep":"","tlshash":"ec21c86e9b2087515c5edcf79a4b65a5d38e9a8231d065052ff281f08f619c9c08c18d","first_seen":"2024-11-03T02:25:45.080077Z","last_seen":"2024-11-04T02:49:42.554133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.712Z","timestamp":1730600716712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Oct 2024 16:52:30 GMT\r\netag: W/\"672112ce-4d7\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZMwZZVL0xtKDhy0eUhxl6Utq7qEo6IqlrOcAx%2FYzK4mBbuXsuBC8sbbBO3LqPVCnK7AaVL%2BVp9E9Da%2FLJZWKUJa9aCffkbMFjaWYi%2Fd34XIcX7M0idJLv2N%2FpLW8ftyf1GQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af5a6d56c6-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Tue, 05 Nov 2024 02:25:16 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":1239,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (1271), with no line terminators","md5":"40d981045a7516cdadd00e8dccc9c58d","sha1":"8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3","sha256":"71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c","sha512":"c4a328efda11026b8efeccbf79d7d87dd5d8988b47ad80ee924da0d9e2d0e6cfc22f0a194470b76eabb1ff83495ff693eee1d16b5c1d1e81bd373dbc31f12a45","ssdeep":"","tlshash":"de2112643e58607e22660133e53f65cee0b12251bd07e150409edc99a5e4fe5063fee9","first_seen":"2023-04-05T04:01:24Z","last_seen":"2025-04-06T22:31:21.493416Z","times_seen":42361,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/vendor/vendor-compiled.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.714Z","timestamp":1730600716714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /js/vendor/vendor-compiled.js?_v=07dab770 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 14:26:13 GMT\r\netag: W/\"660c1585-aab8\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/js/vendor/vendor-compiled.js?_v=07dab770\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UKo3vrfl4p7wua14HAbQQqNbak80H5TCEIf1jZK7DTGUG2bXUNXxBMkdxR%2FtCf29YK67xUpjESiSVROLcNHpBQj6YoHaYl2RehVahk4GasdM2rVxK51p3jm3ejJ41%2BwMkik%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af6a7156c6-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=375\u0026x=1\", cfExtPri, cfHdrFlush;dur=64\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43704,"size_decoded":43704,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15906)","md5":"d2eb06a066c2b5c9afcf5e8a0b2e06cb","sha1":"acb83165d05afb464ad1953bfe253ff70f814add","sha256":"3507ca14c84cbffccd872e634a84d93f50882c817e66ffdf2643a7ed884a205e","sha512":"4dbbaf1d76aca7098ff7c529df411cd8393eaf0530f09749b4b98e5378b1a64f3048f03eb4254501b907b945f5164f5fea780e9e8b866d97f05b325d916e3bf9","ssdeep":"768:KH8r8GESU7AjBaBY1URnAyqjpblwzgoZiGvF/HHuMWj:PrxE77Ps6niRGvF/lWj","tlshash":"4b13fb2d734131a66357e5b9670f0a0ae13761e99b0bc4a0913ccdd02fb857909e7f5e","first_seen":"2023-03-07T01:06:52Z","last_seen":"2026-05-05T00:51:05.842368Z","times_seen":4021,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skibidifarms.st/js/xf/notice.min.js?_v=07dab770","fqdn":"skibidifarms.st","domain":"skibidifarms.st","tld":"st"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://skibidifarms.st/","date":"2024-11-03T02:25:16.716Z","timestamp":1730600716716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skibidifarms.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Oct 2024 23:01:29 GMT","end":"Sat, 25 Jan 2025 23:01:28 GMT"},"fingerprint":{"sha1":"C8:9F:D9:E4:10:85:9B:1F:D7:54:1A:2A:2F:0F:1D:FB:1B:A5:49:51","sha256":"F7:34:2B:BF:22:80:54:7E:D3:A5:82:05:30:18:B0:C1:45:0F:07:F9:30:20:31:10:1A:64:D7:84:B3:09:4D:E1"}}},"request":{"raw":"GET /js/xf/notice.min.js?_v=07dab770 HTTP/1.1\r\nHost: skibidifarms.st\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://skibidifarms.st/\r\nCookie: xf_csrf=JnmaIKhiwr3rx6-j\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 Nov 2024 02:25:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 14:26:13 GMT\r\netag: W/\"660c1585-e4e\"\r\nonion-location: http://skibidittq7uvxiausb4oe2p2ecgsrqzsfuky34rft3ln3eucpd2s3ad.onion/js/xf/notice.min.js?_v=07dab770\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QsNMK9Sq45fvwIoV0wMBtPQkrytzaZ0OYtLaTwXDKg58UkC%2BfX9wemq8eCOlKOE880BZRZ7SLSdwqQX4YhieXvP3kMCLnOQHkKlWQ00JWRdJvakJ%2Fhp7Ioy5EB2H%2FbkJQUk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8dc8e9af6a7356c6-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=22630\u0026sent=35\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=17560\u0026recv_bytes=5247\u0026delivery_rate=5380\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c50e48069c6d89b2\u0026ts=376\u0026x=1\", cfExtPri, cfHdrFlush;dur=65\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3662,"size_decoded":3662,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3758), with no line terminators","md5":"dfe0222d5d182d0d6a9b43d5a6c7a39e","sha1":"f0455388d72298f16ca08c8dcf5b85e18d54f659","sha256":"c9a0822314b301039409542c323db4e053f62525ce8c5aa63c46a9c3a8a46ceb","sha512":"292c56865caaa99da6a1a01cdcd398ca048ea3c0650d26f9147d8578cbe71a3d4b57f52b6ae40b351de9821fcfc5c453431468cffc28e38d8f6fdd4146b4aa26","ssdeep":"","tlshash":"2e71c74fb2446b8312d7a4a4107759a4527796c5ac86c00cff3bdeedc86f9286922bb1","first_seen":"2023-04-11T09:31:57Z","last_seen":"2025-04-04T11:00:33.165199Z","times_seen":260,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-11-03","alert":"Sinkholed","trigger":"skibidifarms.st","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}