{"report_id":"918da73f-66a7-4ec5-8872-2d04ec1d20da","version":6,"status":"done","tags":[],"date":"2026-01-24T13:38:55Z","url":{"schema":"https","addr":"metadaos.xyz","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"metadaos.xyz/","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"title":"Solomon Airdrop claim | Mint \u0026 Claim Your SOLO Token","dom":{"size":103297,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (984)","md5":"e8f2b30b2016641c0a58af01cb388b20","sha1":"278b2edbc1dbb665fe42b2fecb7c6c7e88226370","sha256":"0b2a6de4d21a8aff946f9d98250c3fc8a544dc30c60ee660c1cb68406897daa1","sha512":"c9ab14c48bd4af8f26c24f898425f384beccc183ef448478947c9de9695448758c4e49dadd621d66d3b856878ae61a7f4b5485e088eb133862defeefaace781b","ssdeep":"1536:lY0txluWyXcLo+TVgJ/fKoDwoIjRakVoIjiakA7fYqvzoCA:lY0nS3s/FV/+b","tlshash":"6fa3e92170a412771547c36ab7ea6b2d76aca107de0b948073dd42899fced939e13bcc","dom_hash":"domhash3f6b41070579db3bd1a2317673720f50","first_seen":"2026-01-24T13:38:57.833135Z","last_seen":"2026-01-24T13:38:57.833135Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"metadaos.xyz","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:38:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"metadaos.xyz","ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-18","domain_rank":0,"first_seen":"2025-11-26T21:25:14.892223Z","last_seen":"2025-11-26T21:25:14.892223Z","alert_count":36,"request_count":18,"received_data":2765249,"sent_data":8201,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metadaos.xyz/","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-08-04T03:59:23.641877Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fplyr.mobile.umd.js\u0026t=29487698\u0026u=22a959d259f5da646de3493af1020000662e30c3f6ae55eb4564d1ee","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-08-07T09:24:33.956144Z","times_seen":1397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/zxing.alpha.js","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fee1342e95adf67d5d25ad8df1ae40a8","sha1":"d5829791341403de745cdf9b263bb9f694cbd323","sha256":"69a299bc6fc09963fe5bc38a334e452daf5e24cbf3dc71ab9afec38115653768","sha512":"cddf0e71310060dfbfd23b21b7fde8f72e81b4fd10ec6668778c83a29a1f377e00476d780f9d2942d61dfd526067c0b2fb4d3ceb543db73ca213141187e18ef0","ssdeep":"3072:ENGvXaUU6LEyKKGhMn1sOvchL052xygjGG96eayjzdumyndCuA4uKFkm2TTOOX6w:EI1G81s2+ygjGG96eaVFwgfMSyj","tlshash":"018496e841e634089d72229af02612bfeb72bf085e45a50ae665f6f1a7d3417f0d70d3","size":377096,"data":"","first_seen":"2025-11-26T21:25:19.618489Z","last_seen":"2026-01-24T13:50:31.705399Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ccbe4c1bb60596a054556d9fd25a7bc2","sha1":"93734b550e87ba42e63b071f12a74c2e3376654f","sha256":"aadd71e937eed2d66c04eff6dbe9c72e36a2f3b82dce624a812b2c511ada3db5","sha512":"099992ba0ef1a23903806a4f0a74c036c6d41c3700e0da2a7e8636369ad6349abd82bce2e9f4258b0937c3c384a1e69975681a6b9357c7126e42435a7934a593","ssdeep":"3072:G5GNBjF/k/qTSpIkMVdse5y19SR2rMgjGGv6eayjzdumyH3CuA4umlwmUTT8OXUh:GcLhdsgKMgjGGv6eanlaYfM0Y8","tlshash":"cd7474e452e634089d72629af42602bfef72bf085a05a619e665f6f1a7c3017f0d70d3","size":370296,"data":"","first_seen":"2025-11-26T21:25:19.636816Z","last_seen":"2026-01-24T13:50:31.720973Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"metadaos.xyz/favicon.ico","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:34.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"691d06c4-3ca4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0vagjWGondYjcy328WTgxyvNn%2FS3GMDX46OOMuyn4oyCtFM2F54sNotS0SAGWte6uuLr182hy9C7Cad8xrE8M%2BR2k%2BAPPetMgg%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c2fee953d6cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 952 x 952, 8-bit/color RGBA, non-interlaced","md5":"3530d64b29cfa2c4cea0380aab628b80","sha1":"ab43799474b454ca1f2d360fe6227006f86de3d4","sha256":"c1f70852008e0fd5d39bd649db5307f96b13d8eede93d18553e0e64e8946b129","sha512":"a4c51d6ca62ac5123a172b1a3543c165d5ae1d2630519857c30915bcee7bf3fb932bfa2fd559903c22b6f81d815a68462bb406281ab7cedca48a386767565f77","ssdeep":"384:0E7hwVB8NWgHo21uMYDYNvGKSxNbkTMEI7rK/3pQVvNxWDX2:9SX4X4MIGv+xFkQLr/x9","tlshash":"1b62d17e0cab4df4ceac1ab7646d08d57339382ba501c64b74239dba167ac764fd1214","first_seen":"2024-08-20T03:39:56.516578Z","last_seen":"2026-03-28T14:28:35.500897Z","times_seen":12,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/6063c99ee15f0c50.css","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /6063c99ee15f0c50.css HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:33 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\netag: W/\"691d06c4-18d08\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIlTwDcwIsJrY6HDmECjFSwmbD%2FhuO3pvjiGbhMUAXszJkZS4ZuEBGu1mLg%2BSH0SIwNrs57Hw27v%2Fr9jVwpFN0prBTZqSzJkJwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2fee8d9cf3b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101640,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0805ae76d362f3dc9cba17389235a5fe","sha1":"9840b2e345ebf8d45dc66fa4da4b66dfd7e24a15","sha256":"a0db5aebf95ee1b29d77654fe439a3cc13957fb8145d2ce3fd4ca5503a6adec4","sha512":"e9d182f99bfe99fa5a32b7a8e5c55fd644ff403270843c3fb63fa50d2f675eb730dbb728a8489031002efc4c1f9bdded9c58b6be0bd6c9a381226b4deb274683","ssdeep":"768:4g7ExeS8OcNLZ34vf/AVtXilnTsNpnudj7oBpxvBt3oVb96s/gb0eO0XjLqM8qgn:tk8O+oVb96s/gbd/3NgVfkwnTh","tlshash":"4ba332e4a279e97fec33b4b9a39cf81c610cb156df2616d8fa02a11657c67f30c51628","first_seen":"2025-11-26T21:25:19.633258Z","last_seen":"2026-01-24T13:50:31.70091Z","times_seen":4,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/image-4.png","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /image-4.png HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 4347\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\netag: \"691d06c4-10fb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vq4Lg6m2raJhKUVPlbDaHW1HIdRJ%2FGVrZw1c%2FpU2Q8EQC048PBPZxWpR%2BjfK5lJj1XXafJOj6tWP4iIp6%2FX9p5vYNATc2TPS8XY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2fee91bd3fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit colormap, non-interlaced","md5":"bc41ca798a0d77a3a53985ed81d08999","sha1":"2019123aecd8524f6bd771c574f4ca22995058f8","sha256":"b21baf5c953934d11e8502ee671ae662ad053d410f2ed421934a732ec6cc38e6","sha512":"4c1ee3527b3110be86080e7df96297298257a366171e188b4987590596e19546a6574a72b26d8b2f70062444b0910002d1a918ccc12fc4188856cfcd81f2f4f6","ssdeep":"96:eb1h+SdbRoR/NpeSwsh7hGM/XSTA01JnPFR2:o1gSdby7wshoEXSxFR2","tlshash":"2b913f11cdbf2629c68bd5314fcec8a04db2e32142723eb4552399f85a91cce0a9dce9","first_seen":"2025-11-26T21:25:19.629467Z","last_seen":"2026-01-24T13:50:31.717609Z","times_seen":4,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fplyr.mobile.umd.js\u0026t=29487698\u0026u=22a959d259f5da646de3493af1020000662e30c3f6ae55eb4564d1ee","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:34.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fplyr.mobile.umd.js\u0026t=29487698\u0026u=22a959d259f5da646de3493af1020000662e30c3f6ae55eb4564d1ee HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=plyr.mobile.umd.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:38:34\r\ncdn-edgestorageid: 883\r\ncdn-requestid: a4067b87921265e59c6f303d3160d043\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FhnSyOQgsWJLUgnia5Kb1rXBg%2FqAKC%2BY0M2dj0RUwENe6kqmAF8Lqu5bsj0Y4Ogb7QYtdy8xg50HqvYWJBV%2FlmYiWbfTvghPs4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c2fee935d4cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":366,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:38:32.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:38:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBAMJxGMQMfsmEmyq0n%2FCN3QaNM4%2BP6ru8PqFKA3PB4kQameMJLOkdNuADUf%2FFWykyvqRpLg2Uet3TS0txDpvOj%2FLR7R3Qc2cCA%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2fee8a3d290b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110422,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (935)","md5":"3db366502df592a7d97530ff9030ad51","sha1":"ab2de0ba82127d1e06c2784f037b7e246c0cdea8","sha256":"b48954c1639a56109d7c58475c2d36c0c24a82a66de9b136a5f130509bd18d81","sha512":"2494919e5341f640fadeb7546724b685318b1236792818d460d8e8e3e3d502d17e259b4fc87c54fe0ae1ee74f805bf0ba47815869857028fd59badfc68517942","ssdeep":"1536:nY0txluWyXcLo+TVOJ/fLgBAmIjDUuTmIjeUucp75YvzoC5:nY0nwsONXTNGMs","tlshash":"99b3f96071a012b7154bc269bbeb6b1d775ca107de0b944073dd42899fced939a23bcc","first_seen":"2025-11-26T21:25:19.61711Z","last_seen":"2026-01-24T13:50:31.709542Z","times_seen":4,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":86,"dns":63,"connect":1,"send":0,"wait":304,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/public.png","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /public.png HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 467026\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\netag: \"691d06c4-72052\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAwXYpH4%2FLSydycVsWD0cg2tDS6WgBSVnGeEkIDeEDIk9wfcB5gJU5IM8Q64VMBtmNBDBSKajHgPuLmGzu2b6t0AUVLHRhVVnXM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2fee914d34b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":467026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1366 x 695, 8-bit colormap, non-interlaced","md5":"f62e8e59d2e021300eb4496667de3b7d","sha1":"3b46538a78fbd95622164284948da24f2f99f9a0","sha256":"17ea95fb9687db24d4ce5723077a843c04b265d34e6721d0d6fdf54231fe2efd","sha512":"5e124087d53445ea3ab872e6feafc94b226b540a888354d7db233b8124d0088d90b6fafbc4c98f2777a9f516c121190090bca12e766a940a942f55a5cfb84a22","ssdeep":"12288:h1kDHJGr3Y+qD3QcbL6bdesOJrzxAOQ9egbV8EgX8ZQm:hr3PqDgwpzxAcxEgXsF","tlshash":"bda423dcdda2bdb47ec6b0f0f1021056826d88bca8e55a3a743ee65e48741fc8791d36","first_seen":"2025-11-26T21:25:19.623471Z","last_seen":"2026-01-24T13:50:31.703226Z","times_seen":4,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/93f479601ee12b01-s.p.woff2","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /93f479601ee12b01-s.p.woff2 HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/16ae55a301a2e670.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 31288\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\netag: \"691d06c4-7a38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Hhg%2FHjHPrFcOJ2rrxqU%2Bn%2FNDZCIGJKstGJGswkv6HOSJCRaawGNfeY%2F692Ve3MG6hlbcvQqH59otMHk8Qln1uufEKYepzK%2Bzuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2fee918d37b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31288,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-08-13T21:17:31.137598Z","times_seen":25897,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/globe.svg","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /globe.svg HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"691d06c4-3c1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCoc5BIuSmOZ15IUudnFzTLuqIBQAkf5jMIXVjCXJZHqqMBUpb6AGhhxEOhzuASNTa%2FSPMamNN3KBxXCqnQoXFrlsmGR7FZStHw%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2fee91bd3cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":961,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd2430cf2a41f83d0650150ebce68f94","sha1":"a278a1c47ca53ddafeb184dfdf044a63a170d8fa","sha256":"20fdd8b1c5d83e95eea450ea6ebf9d3d8a224048ee73a47774654ce95adc103d","sha512":"f231fa242262a6e91cbf624b0f0a3ce1038593d84386e7f8ae5f6845174e2ebdf90d8b74a5945bb83be7d433fe47377c2184d8d11e22b9a810f2ceab0ad40ff5","ssdeep":"","tlshash":"8c1197e41348892cfd2aa711f72b3134913b80fb2788ac80d2b059721a6464eaa3b1d8","first_seen":"2025-10-16T10:57:34.943808Z","last_seen":"2026-01-24T13:50:31.707403Z","times_seen":6,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/ba6d6c8f74d099edbfbe432bb8c987f6c4e1c217.svg","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /ba6d6c8f74d099edbfbe432bb8c987f6c4e1c217.svg HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/6063c99ee15f0c50.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"691d06c4-9f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FA94z9lZJ%2F%2FSTh3Qy7kwSqshbOVQ6azj6ZVh%2FKY0etuGfN%2FA14IeBTSisG78rCL9XOlu0c4KhJMUdCub6rDlKDH9y0AE%2BtmaZe0%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2fee914d33b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":159,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d374b1fd39448b03749ddc73408f4336","sha1":"ba6d6c8f74d099edbfbe432bb8c987f6c4e1c217","sha256":"33fc45fc146418a5785ff856a21d4b2c32a8e360e8a14dc90b5436cb71bef0f8","sha512":"0985023d3aee06bff68680c94dda3052941a8ff20438f107b9678921786eb82dbd2817381e753d4bbc70db792b9dc655e8876b455ead24698b6c49c8d9f7e196","ssdeep":"","tlshash":"eac08cb982884a1cc00aa330da78fc29c93bb05033892010c6436324e08866b2ea29ac","first_seen":"2025-11-26T21:25:19.622424Z","last_seen":"2026-03-28T14:28:35.489401Z","times_seen":7,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/EBGaramond-VariableFont_wght.ttf","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /EBGaramond-VariableFont_wght.ttf HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/6063c99ee15f0c50.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 934420\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\netag: \"691d06c4-e4214\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4DyFpKwTFWhgQ9qtSn5O5BRwWfHLsow5n%2FfBxeLn6zHvW7XTMgGMKvEgfWY4AD3HFsYqDqUq3rVSGe4MJW1jOrmLMZMWkrBPF0g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2fee915d36b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934420,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 27 names, Microsoft, language 0x409","md5":"1c2afe8dc74de759021346faa382c2e8","sha1":"0021ea0cc2d388538dfed890e3e8f72c8ed568a0","sha256":"deded453a85fa941f758e54ca893365a426ad30096efe9ab156b3436c9e3cf8e","sha512":"b804de80daa744e144c51e2e0e213a83fc99148c61714f005b52ce03bd003117ff6b7102312865fabccf31ed18db532dd6c068d6684c5f54dd9f98f812d2f479","ssdeep":"12288:vnzGW76vRU4z+Xbra+iQh4VYNPjapEWXtN+sLvpkSFI4UyLdhV+qodtKswu:fzLyR/zobra+iQhYYNPjapEW9NGjd/Z","tlshash":"ba15ae13f723e949f70b3fbd54a6620495efb41aaa3d414ed1232839dddf2606d886c2","first_seen":"2025-10-16T10:57:34.815109Z","last_seen":"2026-08-12T22:13:52.307599Z","times_seen":32,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/4cf2300e9c8272f7-s.p.woff2","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /4cf2300e9c8272f7-s.p.woff2 HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/16ae55a301a2e670.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28388\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\netag: \"691d06c4-6ee4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxIV1R91PeXT3gz7D86x%2BcDDvhcTTPLiaEqKYCAmBrJWhZWPKwbljDcsUA9x5pThFjQg1F03NfF6%2B%2FCRgUlYHO4hPuNDnL7tgTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2fee914d35b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-08-13T21:17:31.138419Z","times_seen":24511,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/share.svg","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /share.svg HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"691d06c4-29f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dj9UJfi46tu6l%2BbbQmol5Qos9vMbmfw1dYgPkPo3TCtgQ9cCmvlV4wBtV4JkaaP2N4nTMNKWKSTGIl%2Fv43hf%2FwWzs%2Fy8wEAHc48%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2fee91bd3db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8dc6209360884f524d800fb23e90daef","sha1":"7f120a71367d43580036508dda131f357c57dfad","sha256":"a0e654bff6bc120c51c97eec706ef045b019758ea5fe532529d36986186aeba8","sha512":"5fb94a3ab55ed2894a06a412af82f5c08db4535626b482230af70344dfc6af41ce5eb9a910161c2a0a5dbd2b635e72873b38cfeccf6fbe3dc7b842feb6471317","ssdeep":"","tlshash":"79017da11308dc3cf1238b11f72e3234656e11f71ac8af80c4712672597956ea87f5e9","first_seen":"2025-10-16T10:57:34.854415Z","last_seen":"2026-01-24T13:50:31.713987Z","times_seen":6,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/question.svg","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /question.svg HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"691d06c4-3a5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhA6VLVFpDn0GRUu%2FO5%2FrQzIuY3a7J7lvxagw2OW1fd2Yl6WPpKtDV2GwV2VgESLXZKIrWAIfd6NcJP1n3tGO6WtHMsF6BwphqE%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2fee91bd3eb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":933,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fd7ae2c913787c4423dbaead599bb8a","sha1":"7ef1259743de38df3ea74f5718bfa58a0a1398cb","sha256":"dfb300d1264793142abcc7df1d397e7e6b592faeac2fea2c4ad75133e1254b25","sha512":"249a15136042db92c0ca6acd4e21831333eda732c785bdd6d2951bee7bf4093684589f17421d78551d9f97b87fce89c5b8310ebb8614f4dd8d3d51acfa610d00","ssdeep":"","tlshash":"761100a9638cc93cf9031760c7123235b2b705abad8cb350907191b4592454fdd7b9ec","first_seen":"2025-10-16T10:57:34.858983Z","last_seen":"2026-01-24T13:50:31.718442Z","times_seen":7,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz//secureproxy?s=%2Fjmpd%2F","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:34.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metadaos.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1732\r\nOrigin: https://metadaos.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1732,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 505 HTTP Version Unsupported\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:35 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 26\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"1a-upO6eNGXiLH/etOGU8Z4TSsCvOM\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9993\r\nx-ratelimit-reset: 1769261975041\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 505\r\ncdn-cachedat: 01/24/2026 13:38:35\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 6fd4a755a503f9c5f5dc36c4b8961ca9\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrfzsJgZKN97OEGzqaxRYuFKo0IdSU53MN9MdPcvRFSwEvYXIJzU9jggo8gX3oOXsoG0%2FoK2NlvJuk9NRxwwrWcTrfgYP9sQSVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2fee976d7cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"505","status_text":"HTTP Version Unsupported","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1d861534f29a609e5868484697373f4b","sha1":"ba93ba78d19788b1ff7ad38653c6784d2b02bce3","sha256":"eda8600220617deb22dfaeb6cfe8c1a2105750566704e7a3102489717d53f99a","sha512":"b62eb914bda78f0e733909f1bec747354cdc97209a44cb2daba63485c3481cbc7b3ee82fbcfc5a30e129ea109f804088bf28e622cc6ff8f1cd15328e3deaed3b","ssdeep":"","tlshash":"3180003c20202220200002822200022222e022b200200208802082b202000ac83af338","first_seen":"2026-01-24T13:38:56.240906Z","last_seen":"2026-08-03T12:35:27.23255Z","times_seen":213,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/zxing.alpha.js","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /zxing.alpha.js HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:33 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\netag: W/\"691d06c4-5c108\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0d7xzGtAwHDpqZKU3BF9%2BgE%2FaOWvi3u3gxhb0%2F3eXy9gGa4%2FWTw6AnIp269BjuEjLZ2wT0%2F4Nnjglp7yP%2BkfBqjHDPYmncvr8yw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2fee8dacf6b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"fee1342e95adf67d5d25ad8df1ae40a8","sha1":"d5829791341403de745cdf9b263bb9f694cbd323","sha256":"69a299bc6fc09963fe5bc38a334e452daf5e24cbf3dc71ab9afec38115653768","sha512":"cddf0e71310060dfbfd23b21b7fde8f72e81b4fd10ec6668778c83a29a1f377e00476d780f9d2942d61dfd526067c0b2fb4d3ceb543db73ca213141187e18ef0","ssdeep":"3072:ENGvXaUU6LEyKKGhMn1sOvchL052xygjGG96eayjzdumyndCuA4uKFkm2TTOOX6w:EI1G81s2+ygjGG96eaVFwgfMSyj","tlshash":"018496e841e634089d72229af02612bfeb72bf085e45a50ae665f6f1a7d3417f0d70d3","first_seen":"2025-11-26T21:25:19.618489Z","last_seen":"2026-01-24T13:50:31.705399Z","times_seen":4,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/16ae55a301a2e670.css","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /16ae55a301a2e670.css HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:33 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\netag: W/\"691d06c4-acd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2TOT5LpSCDOHuAcLVFi%2BEUuring7q9FsW%2Fq4QWF6%2Fs%2FD33G7iFPCJmz0iGflJrstaFt5L1Wg1PS1fA1pn4ygmGMtRv%2F%2BNohB6Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2fee8dacf5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2765,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2717)","md5":"75a9da2b2d90acb6a644facbafe42870","sha1":"1a1d0ded72ce326e74700eda5c8ca0b40eaaf623","sha256":"9a9a204c76a7b6b68a172dde649b43ff9738df53b2c264b72bdc3bc5596570ae","sha512":"93abacc84a9ecba4e11d5094a3042e40ecb9469331711c5a58c9ff89392ca0da3db4c31ada332ab8b6cae144b7f382b24418329aa32edc7bb5a43988e17c50c9","ssdeep":"","tlshash":"bd519b24801a945fd5b0bc9339ca3f73252d701acad80a62aa29157d4de786e72f0b6c","first_seen":"2025-11-26T21:25:19.627188Z","last_seen":"2026-01-24T13:50:31.710485Z","times_seen":4,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/secureproxy?e=ping_proxy","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:33.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metadaos.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 24 Jan 2026 13:38:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Msnl%2FQS5rY8gVf1lT3NJMBpBP2iJbIzVr3qfAdxHWUf49WfzdTUwhph3oqJ6bRk4ddHgFF0udW5UgN4KO00IEr7PHX%2BaXd5H91Y%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2fee910d2db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-13T05:58:08.703701Z","times_seen":9040,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metadaos.xyz/favicon.ico","fqdn":"metadaos.xyz","domain":"metadaos.xyz","tld":"xyz"},"ip":{"addr":"104.21.47.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metadaos.xyz/","date":"2026-01-24T13:38:34.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metadaos.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:33:25 GMT","end":"Fri, 17 Apr 2026 03:31:59 GMT"},"fingerprint":{"sha1":"3F:70:FF:58:89:AD:34:3E:E9:11:8E:3E:6C:F3:68:1C:C7:4C:AD:30","sha256":"33:62:B4:18:23:F2:2C:71:74:53:25:BE:DC:46:DC:B5:36:D1:A0:19:CA:55:B8:CB:E3:F1:BD:D4:AE:C9:22:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metadaos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metadaos.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:38:34 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 18 Nov 2025 23:52:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"691d06c4-3ca4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWTFJ3zhhWl6xmP1OuWjLRtMjpFIWXV4fp6j1eD4EpuWjY6dQ9HcAIOSIxMf0xnyaD6Ep33UjP8YDBVxlWYsTkKpVuIK2bb%2Fi10%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c2fee953d6bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 952 x 952, 8-bit/color RGBA, non-interlaced","md5":"3530d64b29cfa2c4cea0380aab628b80","sha1":"ab43799474b454ca1f2d360fe6227006f86de3d4","sha256":"c1f70852008e0fd5d39bd649db5307f96b13d8eede93d18553e0e64e8946b129","sha512":"a4c51d6ca62ac5123a172b1a3543c165d5ae1d2630519857c30915bcee7bf3fb932bfa2fd559903c22b6f81d815a68462bb406281ab7cedca48a386767565f77","ssdeep":"384:0E7hwVB8NWgHo21uMYDYNvGKSxNbkTMEI7rK/3pQVvNxWDX2:9SX4X4MIGv+xFkQLr/x9","tlshash":"1b62d17e0cab4df4ceac1ab7646d08d57339382ba501c64b74239dba167ac764fd1214","first_seen":"2024-08-20T03:39:56.516578Z","last_seen":"2026-03-28T14:28:35.500897Z","times_seen":12,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"metadaos.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}